# changelog

author: John Dennis <jdennis@redhat.com> - 0.16.0-3
changelog:
  - Resolves: #1225212
    Reads from file like objects actually only worked for file objects
  - Resolves: #1179573
    python-nss-doc package is missing the run_tests script
  - Resolves: #1194349
    test_pkcs12.py does not works in FIPS mode


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-3
changelog:
  - Fix a security flaw (CVE-2018-7750) in Paramiko's server
    mode (emphasis on **server** mode; this does **not** impact *client* use!)
    Backported from 2.1.5.
    Resolves #1557142


author: Pavel Cahyna <pcahyna@redhat.com> - 2.1.1-4
changelog:
  - Add a dependency on python2-pyasn1. It used to be a dependency
    of python2-cryptography, but it is not the case with newer versions.
    (RHBZ #1559133)


author: Jake Hunsaker <jhunsake@redhat.com> - 2.1.1-9
changelog:
  - Fix a security flaw (CVE-2018-1000805) in Paramiko's server
    mode (does not effect client mode).
    Backported from 2.1.6
    Resolves rhbz#1637366


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-3
changelog:
  - Ugh.  Enable unittests and make a note that the python3 module is totally
    non-functional.  Open a bug for that for the actual package maintainers to
    make a decision on.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.7.5.1-4.20111221hg1498
changelog:
  - Tarball is missing files, use a snapshot to get those files and also pick up
    several bug fixes (one related to serving CGI scripts, another for http
    Continue requests, and a third regarding digest authentication and internet
    explorer)


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Roman Rakus <rrakus@redhat.com> - 2.0.0-12
changelog:
  - Mark doc subpackage arch dependent. Docs are built depending on supported
    features, which are different across archs.
    Resolves: rhbz#987839


author: Charalampos Stratakis <cstratak@redhat.com> - 2.0.0-23gitd1c6db8
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042522


author: Thomas Spura <tomspur@fedoraproject.org> - 3.3-4
changelog:
  - update to most recent python packaging guidelines
  - rebuild with python3.2
    http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-3
changelog:
  - Run _build_tables.py to build the lextab.py and yacctab.py; otherwise
    they have to be regenerated at runtime for no benefit.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-4
changelog:
  - Upstream repository is now on github.
  - Fix rpmlint strange-permission complaint.
  - Rename patches, Source1 to all start with pycparser-{version}, to
    simplify updating patches for future upstream releases.


author: Eric Smith <brouhaha@fedoraproject.org> 2.09.1-5
changelog:
  - Renumbered Fedora-specific Patch1 to Patch100
  - Added new Patch1 to fix table generation when the build system
    already has a python-pycparser package installed.
  - Submitted Patch0 and Patch1 as upstream issues.
  - Added comments about patches.


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Steve Milner <smilner@fedoraproject.org> - 1.4-1
changelog:
  - update for upstream release
  - Add python2.6 support done by Steve Traylen <steve.traylen@cern.ch>. BZ#662755.


author: Thomas Spura <tomspur@fedoraproject.org> - 1.3.1-7
changelog:
  - update to most recent python guidelines
  - rebuild with python3.2
    http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.15-9
changelog:
  - The libudev library loaded in context to workaround cleanup problems
    Resolves: rhbz#1252833
  - Retry interrupted calls
    Resolves: rhbz#1108921


author: Michel Salim <salimma@fedoraproject.org> - 2.4.1-2
changelog:
  - Clean up spec, removing unnecessary declarations
  - Rename tool in %{_bindir} to the less ambiguous qrcode


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-7
changelog:
  - Modify tests to run in pytest
  - Add a bcond online_tests to enable the tests
  Related: rhbz#1745417


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-9
changelog:
  - Bring back the requests.packages aliasing of its submodules
  Resolves: rhbz#1785607, rhbz#1785666, rhbz#1785696, rhbz#1787679


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-10
changelog:
  - Fix test_urllib3_retries by having it import urllib3 from the global namespace
  Resolves: rhbz#1771567


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Tomas Orsava <torsava@redhat.com> - 2.6.0-7
changelog:
  - Modify tests to run in pytest
  - Add a bcond online_tests to enable the tests
  Related: rhbz#1754830


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-9
changelog:
  - Bring back the requests.packages aliasing of its submodules
  Resolves: rhbz#1811051, rhbz#1811058, rhbz#1811108, rhbz#1811114


author: ckozak <ckozak@redhat.com> 1.10.3-1
changelog:
  - Merge pull request #89 from candlepin/alikins/flex_branding
    (c4kofony@gmail.com)
  - Change brand attr 'os' to 'brand_type' (alikins@redhat.com)
  - s/os_name/os (alikins@redhat.com)
  - add support for 'os_name' productid attribute (alikins@redhat.com)


author: ckozak <ckozak@redhat.com>
changelog:
  - 1006748: replace simplejson with 'ourjson' (alikins@redhat.com)
  - Log the new requestUuid from candlepin if it is present in the response.
    (dgoodwin@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.6-1
changelog:
  - Fix a crash that occurs when rhsm.conf is missing (ckozak@redhat.com)
  - Correct implementation of __eq__ for Content objects. (awood@redhat.com)
  - Log ca_dir and loaded ca pems on one line. (alikins@redhat.com)
  - Add default full_refresh_on_yum option. (awood@redhat.com)
  - Send empty JSON list when deleting all overrides. (awood@redhat.com)
  - Add __hash__ method to Content classes. (awood@redhat.com)
  - Add method to get all content overrides for a consumer (mstead@redhat.com)
  - Add methods to set and delete content overrides. (awood@redhat.com)
  - 1008808: json ValueErrors have no .msg attribute (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.9-1
changelog:
  - Removing entitlement cert and key from getEntitlementList (ckozak@redhat.com)
  - respect http(s)_proxy env variable for proxy information (jesusr@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.12-2
changelog:
  - Add attributes for brand_name (alikins@redhat.com)
  - updated tito.props (ckozak@redhat.com)
  - removed other releasers (ckozak@redhat.com)


author: Tomas Orsava <torsava@redhat.com> - 3-28
changelog:
  - Fix the %py_dist_name macro to not convert dots (".") into dashes, so that
    submodules can be addressed as well Resolves: rhbz#1564095


author: Lumír Balhar <lbalhar@redhat.com> - 3-31
changelog:
  - Converting specfile from F28 to RHEL7
  - Move the macros to the standard RHEL7 macro location at /etc/rpm/,
    instead of Fedora's location at /usr/lib/rpm/macros.d/
  - Import the macros.python{,2} files from the python-devel package where they
    resided until now, and Conflict with that old version of python-devel
  - Import the macros.pybytecompile from Fedora rawhide / RHEL8
  Resolves: rhbz#1660579


author: Miro Hrončok <mhroncok@redhat.com> - 3-32
changelog:
  - %python_provide: Obsolete and provide python36- from python3-
  - %python_provide: Provide python3- from python36-
  Resolves: rhbz#1702719


author: Maurizio Lombardi <mlombard@redhat.com> - 2.1.fb63-5
changelog:
  - rtslib never creates hba directories without a storage object within it,
    but if under some circumstance these existed then we should remove them.


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 0.1.13-1
changelog:
  - Fix "python2-s3transfer" from EPEL issue by adding it to Obsoletes
  - Rebase to v0.1.13 to fix missing "max_bandwidth" issue

    Resolves: rhbz#1576985
    Resolves: rhbz#1578083


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.2-1
changelog:
  - Add get_priority_{min,max} methods
  - Add constants for SCHED_{BATCH,FIFO,OTHER,RR}
  - Implement get_priority method
  - Add pchrt utility for testing the bindings, chrt clone
  - Add ptaskset utility for testing the bindings, taskset clone


author: John Kacur <jkacur@redhat.com> - 0.4-5
changelog:
  - Add man pages for pchrt and ptaskset
  - Fix and update usage messages for pchrt and ptaskset
  - Resolves:rhbz#948381


author: John Kacur <jkacur@redhat.com> - 0.4-6
changelog:
  - python-schedutils-Update-URL-in-python-schedutils.sp.patch
  - schedutils.c-added-support-for-SCHED_DEADLINE.patch
  Resolves: rhbz#1298388


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-1
changelog:
  - Switch source from distribute to setuptools, that are now uptodate and supported.
  - Update to setuptools 0.8.0.
  - Specfile cleanup (unnecessary Python 3 logic, old RPM stuff, bogus changelog dates)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.1.0-1
changelog:
  - Update to 3.1.0 in Rawhide.
  - Build the python3 subpackage
  - Update to new-style filtering of provides


author: Nils Philippsen <nils@redhat.com> - 0.2.17-1
changelog:
  - fix default timeouts of None in bus objects (#716620)
  - reduce proxy method calling overhead a bit more


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
  - allow service object methods to be called locally
  - preserve signature, docstrings, etc. of decorated methods


author: Nils Philippsen <nils@redhat.com> - 0.4.0-1
changelog:
  - version 0.4.0:
    - get rid of (ancient) PolicyKit-0.x support
    - add basic (experimental, unstable) dbus introspection support
    - learn to cope with polkitd being restarted


author: Charalampos Stratakis <cstratak@redhat.com> - 0.4.0-3
changelog:
  - Make firewalld to not log errors when running commands as root
  in the absence of polkitd.
  Resolves: rhbz#1393488


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.13-8
changelog:
  - Fix memory leak in the auth_fn callback.
  - Make sure auth info is NUL-terminated.
  Resolves: rhbz#1248519


author: Nils Philippsen <nils@redhat.com> - 0.9.1-1
changelog:
  - version 0.9.1, upstream feature and bugfix release
  - no need to use 2to3 for python 3.x anymore
  - build C extension for python 3.x
  - require python2-devel >= 2.6 for building


author: jortel <jortel@redhat.com> - 0.3.7-1
changelog:
  - Better soap header support
  - Added new transport HttpAuthenticated for active (not passive) basic authentication.
  - New options (prefixes, timeout, retxml)
  - WSDL processing enhancements.
  - Expanded builtin XSD type support.
  - Fixed <xs:iniclude/>
  - Better XML date/datetime conversion.
  - Client.clone() method added for lightweight copy of client object.
  - XSD processing fixes/enhancements.
  - Better <simpleType/> by <xs:restriction/> support.
  - Performance enhancements. 
  - Fixed tickets: #65, #232, #233, #235, #241, #242, #244, #247, #254, #254, #256, #257, #258


author: jortel <jortel@redhat.com> - 0.3.8-1
changelog:
  - Includeds Windows NTLM Transport.
  - Add missing self.messages in Client.clone().
  - Changed default behavior for WSDL PartElement to be optional.
  - Add support for services/ports defined without <address/> element in WSDL.
  - Fix sax.attribute.Element.attrib() to find by name only when ns is not specified; renamed to Element.getAttribute().
  - Update HttpTransport to pass timeout parameter to urllib2 open() methods when supported by urllib2.
  - Add null class to pass explicit NULL values for parameters and optional elements.
  - Soap encoded array (soap-enc:Array) enhancement for rpc/encoded.
    Arrays passed as python arrays - works like document/literal now.
    No more using the factory to create the Array.
    Automatically includes arrayType attribute.  Eg: soap-enc:arrayType="Array[2]".
    Reintroduced ability to pass complex (objects) using python dict instead of suds object via factory.
  - Fixed tickets: #84, #261, #262, #263, #265, #266, #278, #280, #282.


author: jortel <jortel@redhat.com> - 0.3.9-1
changelog:
  - Bumped python requires to 2.4
  - Replaced stream-based caching in the transport package with document-based caching.
  - Caches pickled Document objects instead of XML text. 2x Faster!
  - No more SAX parsing exceptions on damaged or incomplete cached files. 
  - Cached WSDL objects. Entire Definitions object including contained Schema object cached via pickle.
  - Copy of soap encoding schema packaged with suds.
  - Refactor Transports to use ProxyHandler instead of urllib2.Request.set_proxy().
  - Added WSSE enhancements <Timestamp/> and <Expires/> support. See: Timestamp token. 
  - Fixed Tickets: #256, #291, #294, #295, #296


author: jortel <jortel@redhat.com> - 0.4-1
changelog:
  - Fix spelling errors in spec description.
  - Fix source0 URL warning.
  - Updated caching to not cache intermediate wsdls.
  - Added DocumentCache which caches verified XML documents as text. User can choose.
  - Added cachingpolicy option to allow user to specify whether to cache XML documents or the WSDL object.
  - Provided for repeating values in reply for message parts consistent with way handled in nested objects.
  - Added charset=utf-8 to stock content-type http header.
  - Added <?xml version="1.0" encoding="UTF-8"?> to outgoing SOAP messages.
  - Detection of faults in successful (http=200) replies and raise WebFault. Search for <soapenv:Fault/>.
  - Add plugins facility. 
  - Fixed Tickets: #251, #313, #314, #334


author: Thomas Spura <tomspur@fedoraproject.org> - 2.2.1-1
changelog:
  - update to upstream release 2.2.1 (fixes CVE-2012-2374)
  - fix typo for epel6 macro bug #822972 (Florian La Roche)


author: Julian Sikorski <belegdol@fedoraproject.org> - 11.1.0-1
changelog:
  - Updated to 11.1.0
  - Obsoleted zsh subpackage (upstream ticket #3078)
  - mktap is gone (upstream ticket #5293)
  - Dropped obsolete Group, Buildroot, %clean and %defattr


author: Lumír Balhar <lbalhar@redhat.com> - 12.1.0-7
changelog:
  - Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
  Resolves: rhbz#1813439 rhbz#1813447
  - Remove useless macros definitions


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.10-0
changelog:
  - clamp timestamps from the future.  BZ 894630, 1013733
  - Fix the condition to enter single-connection mode. BZ 853432
  - Fix unit tests


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-30
changelog:
  - Update to latest HEAD.
  - add ftp_disable_epsv option. BZ 849177
  - Spelling fixes.
  - docs: throttling is per-connection, suggest max_connections=1. BZ 998263
  - More robust "Content-Length" parsing. BZ 1000841


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-31
changelog:
  - Update to latest HEAD.
  - Switch to max_connections=1 after refused connect. BZ 853432
  - Never display negative downloading speed. BZ 1001767
  - clamp timestamps from the future.  BZ 894630, 1013733


author: Zdenek Pavlas <zpavlas@redhat.com> - 3.9.1-32
changelog:
  - Update to latest HEAD.
  - Fix traceback when entering single-connection mode with DEBUG off
  - Fix traceback when limit==None and DEBUG is on
  - Fix the condition to enter single-connection mode


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: bkabrda <bkabrda@redhat.com> - 1.10.2-2
changelog:
  - Fix the way we unbundle six to make ovirt work even when they remove .py files
  Resolves: rhbz#1247189


author: bkabrda <bkabrda@redhat.com> - 1.10.2-2
changelog:
  - Fix the way we unbundle six to make ovirt work even when they remove .py files
  Resolves: rhbz#1247093


author: Lumír Balhar <lbalhar@redhat.com> - 15.1.0-3
changelog:
  - Add three new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1643829


author: Jiri Kucera <jkucera@redhat.com> - 0.3.9-9
changelog:
  - Backport ecef526 (Stop using crypt_get_error)
    Backport 23a1ff0 (Fix nonsensical error messages on missing keys)
    Fix License, URL and Source0 tags
    Resolves: #1502399, #1574988, #1593855, #1454358


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-1
changelog:
  - Update to 1.7.2
  - Disable pytest.deprecated_call() tests
  - Remove versioned pytest
  - Add build requirements pytz


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-1.1
changelog:
  - Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
  - Fix parsing of long OIDs, fixes RHBZ#1485898


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-2
changelog:
  - Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1402235
  - Add depenency on python-setuptools, fixes RHBZ#1459947
  - Fix parsing of long OIDs, fixes RHBZ#1455755


author: John Dennis <jdennis@redhat.com> - 2.0.1-8
changelog:
  - add missing Obsoletes for prior python-oauthlib package,
    replaced by python2-oauthlib
    Resolves: rhbz#1401784


author: John Dennis <jdennis@redhat.com> - 0.8.0-5
changelog:
  - BuildRequires had python-requests but the Requires was still referencing
    python2-requests which is not yet provided in RHEL 7.4.,
    also add the missing version dependency on python-requests.
    Resolves: rhbz#1401783


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.2.6-9
changelog:
  - Python 2 binary package renamed to python2-subprocess32
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marcel Plch <mplch@redhat.com> - 3.2.6-14
changelog:
  - Backport upstream patch for heap overflow when parsing too many arguments
  - Resolves: rhbz#1619386


author: Lumir Balhar & Tomas Orsava <lbalhar@redhat.com> - 3.6.8-2
changelog:
  - Converting F28 python3 specfile to RHEL7
  - Updated the bootstrapping sequence
  - Disabled LTO because of buggy support for it in gcc on RHEL7
  - Removed deprecated system-python and platform-python tags and files
  - Removed a tag from `python3-libs` that recommended the `python3` package,
    because the Recommends tag doesn't work in RHEL7
  - Remove unnecessary unversioned requires on glibc and gdbm
  - Changes from RHEL8:
    - Move macros.pybytecompile to python-rpm-macros
    - Enable test_gdb, test_faulthandler
  - Changes from Fedora:
    - Security fix for CVE-2019-5010 (#1666519, #1666522)
    - Make sure we don't ship any exe files (not needed an prebuilt)
  Resolves: rhbz#1597718


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-4
changelog:
  - Add explicit conflicts with python34 < 3.4.9-3, which was the main python3
    package in EPEL before that version and contained conflicting files,
    e.g. /usr/bin/python3
  Resolves: rhbz#1597718


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-8
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703535 and rhbz#1704364


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-18
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-19
changelog:
  - Security fix for CVE-2023-24329
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2173917


author: EL Errata <el-errata_ww@oracle.com> - 3.6.8-21.0.1
changelog:
  - Remove the "getfile" feature of pydoc for oracle7 builds only
    [Orabug: 33182027][CVE-2021-3426]
  - Add Oracle Linux distribution in platform.py [Orabug: 20812544]


author: Dmitriy Popov <dpopov@cloudlinux.com> - 3.6.8-21.tuxcare.els1
changelog:
  - Moved tuxcare patches from 3.6.8-19
  - CVE-2021-3177: Replace snprintf to prevent buffer overflow
  - CVE-2022-48565: Reject XML entity declarations in plist files
  - CVE-2021-3737: Fix http client infinite line reading (DoS) after a
    HTTP 100 Continue
  - CVE-2021-28861: Fix an open redirection vulnerability in http.server
  - CVE-2022-0391: Make urllib.parse sanitize urls containing ASCII newline and
    tabs
  - CVE-2022-45061: Fix quadratic time idna decoding
  - CVE-2022-48560: fix posible crash in heapq with custom comparison operators
  - CVE-2020-26116: prevent header injection in http methods


author: Dmitriy Popov <dpopov@cloudlinux.com> - 3.6.8-21.tuxcare.els4
changelog:
  - CVE-2024-6232: remove backtracking when parsing tarfile headers
  - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values
    with backslashes


author: Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.6.8-21.0.1.tuxcare.els2
changelog:
  - CVE-2024-9287: fix path names quoting to prevent command injection in virtual
    environment activation scripts


author: Koba Karaputadze <kkaraputadze@cloudlinux.com> - 3.6.8-21.0.1.tuxcare.els3
changelog:
  - CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to
    prevent directory traversal vulnerability


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els1
changelog:
  - Bump package Release to 21.0.5
  - CVE-2025-8194: tarfile: validate archives to ensure member offsets are
    non-negative


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els2
changelog:
  - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517:
    fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data")


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els6
changelog:
  - CVE-2026-1299: reject newline injection in email module's BytesGenerator when serializing headers
  - Skip test.test_xml_etree.XMLPullParserTest.test_simple_xml during RPM build;
    unrelated expat-2.1.0-15.0.7.tuxcare.els1 regression breaks XMLPullParser
    chunked-feed semantics in TuxCare ELS el7 build chroots


author: Bartosz Staszewski <bstaszewski@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els7
changelog:
  - CVE-2022-37454: fix buffer overflow in _sha3 module
  - CVE-2021-23336: reject semicolon as query-string separator in urllib.parse
  - CVE-2021-3733: fix ReDoS in urllib.request AbstractBasicAuthHandler
  - CVE-2021-4189: stop trusting PASV response address in ftplib
  - CVE-2022-48566: make hmac.compare_digest more constant-time
  - CVE-2023-27043: reject malformed addresses in email.utils.parseaddr


author: Bartosz Staszewski <bstaszewski@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els9
changelog:
  - CVE-2026-4519: reject leading dashes in webbrowser URLs to prevent CLI option injection in pydoc/subprocess


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els11
changelog:
  - CVE-2026-7210: use 16-byte salt for Expat hash-flooding protection (xml.parsers.expat, xml.etree.ElementTree)


author: Viktor Borzov <vborzov@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els12
changelog:
  - CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values
  - CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output()
  - CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow
  - CVE-2025-13462: skip TarInfo AREGTYPE->DIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 3.6.8-21.0.5.tuxcare.els13
changelog:
  - CVE-2026-15308: fix quadratic complexity in html.parser.HTMLParser incremental parsing of long unterminated constructs (DoS)


author: Tomas Orsava <torsava@redhat.com> - 9.0.1-12
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules


author: Miro Hrončok <mhroncok@redhat.com> - 9.0.3-2
changelog:
  - Allow to import pip10's main from pip9's /usr/bin/pip
  - Do not show the "new version of pip" warning outside of venv
  Resolves: rhbz#1569488
  Resolves: rhbz#1571650
  Resolves: rhbz#1573755


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-3
changelog:
  - Converting pip specfile from F28 to RHEL7
  - Disabled building of the Python 2 subpackage
  - Disabled building of docs, because we don't ship its build dependencies in
    RHEL7
  - Updated to a newer version of tests to match the package version
  - Backported Patch3 and Patch4 from Fedora
  Resolves: rhbz#1660573


author: Lumír Balhar <lbalhar@redhat.com> - 9.0.3-6
changelog:
  - Add four new patches for CVEs in bundled urllib3 and requests
  CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074
  Resolves: rhbz#1649153
  Resolves: rhbz#1700824
  Resolves: rhbz#1702473
  Resolves: rhbz#1643829


author: Tomas Orsava <torsava@redhat.com> - 4.14.0-1
changelog:
  - Rebase to rpm 4.14.0 final (http://rpm.org/wiki/Releases/4.14.0)
  - Re-synchronize version/release macros with the rpm Fedora package


author: Tomas Orsava <torsava@redhat.com> - 6-2
changelog:
  - Modifying python-rpm-generators from F29 to be used in RHEL7
  - The regex in pythondist.attr has been modified to only match Python 3
    modules, so that we do not affect the building of python2 files in RHEL7 at
    this late stage
  - Removed python.attr and pythondeps.sh files, because they are contained in
    rpm-build in RHEL7 and we do not want to modify them
  - the pythondist.attr and pythondistdeps.py are completely new, therefore we
    don't need to conflict with anything in RHEL7
  Resolves: rhbz#1660578


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-7
changelog:
  - Converting specfile from F28 to RHEL7
  - Tests disabled because the minimal RHEL7 Python 3 stack does not contain test
    dependencies
  - Disabled building of the Python 2 subpackage
  Resolves: rhbz#1660563


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-8
changelog:
  - SRPM renamed from python-setuptools to python3-setuptools
  - Package prepared to contain only Python 3 version
  Resolves: rhbz#1660563


author: Lumír Balhar <lbalhar@redhat.com> - 0.31.1-4
changelog:
  - Converting specfile from F29 to RHEL7
  - Disabled building of the Python 2 subpackage
  - Disabled tests (by setting the bootstrap on - see note)
  - Removed python-wheel-wheel package with the wheel of wheel
  Resolves: rhbz#1660574


author: Marcin Zajaczkowski <mszpak ATT wp DOTT pl> - 0.5.0-5
changelog:
  - remove prodive/obsolete of python-xattr (bug 781838)
  - fix problem with mixed use of tabs and spaces


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-4.el7
changelog:
  - kvm-Mark-etc-sysconfig-qemu-ga-as-config-noreplace.patch [bz#1150924]
  - Resolves: bz#1150924
    (/etc/sysconfig/qemu-ga is replaced when updated)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-2.el7
changelog:
  - synchronized with qemu-kvm-rhev-2.3.0-9.el7
  - qemuga-Change-fsreeze-hook-default-location.patch [bz#1210707]
  - qemuga-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1211973]
  - Resolves: bz#1210707
    (The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
  - Resolves: bz#1211973
    ('guest-fstrim' failed for guest with os on spapr-vscsi disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-3.el7
changelog:
  - qemuga-Do-not-stop-qemu-guest-agent-service-on-target-switc.patch [bz#1160930]
  - Resolves: bz#1160930
    (The guest agent service in rhel7 guest will be stopped after run the init command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.5.0-2.el7
changelog:
  - qemuga-redhat-blacklist-guest-exec-commands.patch [bz#1340346]
  - Resolves: bz#1340346
    (blacklist guest-exec in newer version of qemu-guest-agent)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.5.0-3.el7
changelog:
  - qemuga-spec-add-qemu-ga-man-page.patch [bz#1101556]
  - Resolves: bz#1101556
    ([RFE] qemu-ga should have a config file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.8.0-1.el7
changelog:
  - Rebase to 2.8.0 base [bz#1414676]
  - Resolves: bz#1414676
    (Rebase qemu-guest-agent to 2.8.0 base)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.8.0-2.el7
changelog:
  - qemuga-Remove-unnecessary-dependencies.patch [bz#1441999]
  - Resolves: bz#1441999
    (Clean qemu-ga dependencies)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-1.el7
changelog:
  - Rebase to 2.12.0 base [bz#1562218]
  - Resolves: bz#1562218
    (Rebase qemu-guest-agent for RHEL-7.6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-2.el7
changelog:
  - qemuga-qemu-ga-make-get-fsinfo-work-over-pci-bridges.patch [bz#1567041]
  - qemuga-qga-fix-driver-leak-in-guest-get-fsinfo.patch [bz#1567041]
  - Resolves: bz#1567041
    (qemu-guest-agent does not parse PCI bridge links in "build_guest_fsinfo_for_real_device" (q35))


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-3.el7
changelog:
  - qemuga-qga-ignore-non-present-cpus-when-handling-qmp_guest_.patch [bz#1611062]
  - qemuga-qemu-guest-agent.spec-add-systemd-devel-dependency.patch [bz#1635571]
  - qemuga-configure-add-test-for-libudev.patch [bz#1635571]
  - qemuga-qga-linux-report-disk-serial-number.patch [bz#1635571]
  - qemuga-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1635571]
  - Resolves: bz#1611062
    ("virsh vcpucount --guest" fails after hotunplug a vcpu with intermediate order by "setvcpu")
  - Resolves: bz#1635571
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-2.el7
changelog:
  - Create separate qemu-guest-agent package based on qemu-kvm-rhev-2.1.0-1.el7 [bz#1117096]
  - Resolves: #bz1117096


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-3.el7
changelog:
  - Allow building qemu-guest-agent on ppc64le
  - Synchronize with qemu-kvm-rhev-2.1.0-3.el7
  - Resolves: bz#1132718
    (qemu-guest-agent fails to build for ppc64le)


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 2.8.0-3.el7
changelog:
  - qemuga-qga-Add-guest-get-host-name-command.patch [bz#1598210]
  - qemuga-qga-Add-guest-get-users-command.patch [bz#1598210]
  - qemuga-qga-Add-guest-get-timezone-command.patch [bz#1598210]
  - qemuga-qemu-ga-check-if-utmpx.h-is-available-on-the-system.patch [bz#1598210]
  - qemuga-qemu-ga-add-guest-get-osinfo-command.patch [bz#1598210]
  - qemuga-test-qga-pass-environemnt-to-qemu-ga.patch [bz#1598210]
  - qemuga-test-qga-add-test-for-guest-get-osinfo.patch [bz#1598210]
  - Resolves: bz#1598210
    (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 2.8.0-2.el7_5.1
changelog:
  - Corrected the package version from 2.8.0-3.el7 to 2.8.0-2.el7_5.1
  - Resolves: bz#1598210
    (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-165.el7
changelog:
  - kvm-Fix-eax-for-cpuid-leaf-0x40000000.patch [bz#1709495]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669068]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669068]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669068]
  - Resolves: bz#1669068
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])
  - Resolves: bz#1709495
    (Change CPUID[0x40000000].EAX from 0 to KVM_CPUID_FE...ATURES (0x40000001))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-166.el7
changelog:
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
  - Resolves: bz#1618503
    (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-167.el7
changelog:
  - Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
  - Resolves: bz#1618503
    (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-168.el7
changelog:
  - kvm-qxl-check-release-info-object.patch [bz#1712703]
  - kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
  - kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
  - Resolves: bz#1270166
    (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
  - Resolves: bz#1712703
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
  - Resolves: bz#1734749
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-169.el7
changelog:
  - kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
  - kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
  - kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
  - Resolves: bz#1626871
    ([RFE] request for using TscInvariant feature with qemu-kvm.)
  - Resolves: bz#1706658
    ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-170.el7
changelog:
  - kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
  - kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
  - kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
  - kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
  - kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
  - kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
  - kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
  - kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
  - kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
  - kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
  - Resolves: bz#1709971
    ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
  - Resolves: bz#1714791
    ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
  - Resolves: bz#1749735
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-171.el7
changelog:
  - kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
  - kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
  - kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
  - Resolves: bz#1638471
    ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
  - Resolves: bz#1760607
    (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-172.el7
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
  - Resolves: bz#1771961
    (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-173.el7
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
  - Resolves: bz#1791560
    (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-173.el7_8.1
changelog:
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1798970]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798970]
  - Resolves: bz#1798970
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-173.el7_8.3
changelog:
  - kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1822235]
  - kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1822235]
  - Resolves: bz#1822235
    (Add support for newer glusterfs [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.5.3-174.el7
changelog:
  - kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
  - kvm-slirp-disable-tcp_emu.patch [bz#1791679]
  - kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
  - kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
  - Resolves: bz#1618503
    (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
  - Resolves: bz#1791679
    (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
  - Resolves: bz#1800515
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
  - Resolves: bz#1802215
    (Add support for newer glusterfs)


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7
changelog:
  - kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
  - Resolves: bz#1810408
    (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7
changelog:
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
  - kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
  - Resolves: bz#1837565
    (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
  - Resolves: bz#1869693
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7_9.2
changelog:
  - kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
  - kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
  - Resolves: bz#1842923
    (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
  - Resolves: bz#1860960
    (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7_9.3
changelog:
  - kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
  - Resolves: bz#1884997
    (qemu-kvm FTBFS on rhel7.9)


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7_9.4
changelog:
  - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
  - Resolves: bz#1917449
    (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7_9.5
changelog:
  - kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
  - Resolves: bz#2007036
    (Memory leak when using dma_read/write with virtio-scsi)


author: Jon Maloy <jmaloy@redhat.com> - 1.5.3-175.el7_9.6
changelog:
  - kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
  - Resolves: bz#2056725
    (qemu-kvm leaks on qemu_rbd_snap_list)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.0.4-2
changelog:
  - update summary/description/Source_url
  - %files: track soname
  - cleaner cmake-fu
  - upstream noexecstack patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.0.4-3
changelog:
  - require the main package with exact version-release in -examples
  - remove explicit Requires: qt4-devel pkgconfig from -devel, now autodetected


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.1-8
changelog:
  - skip stripping some compiler flags (undocumented)
  - %files: track files closer (lib soname in particular)
  - -devel: avoid dep on cmake 
  - %check: +make test, pkgconfig check


author: Doug Ledford <dledford@redhat.com> - 0.4.6-6
changelog:
  - Fix the fact that qperf was using the wrong PF_RDS define now that RDS
    is integrated upstream and its assigned number is no longer temporary


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - remove BuildRoot tag in spec file
  - remove "rm -rf $RPM_BUILD_ROOT" at the beginning of %install section
  - remove %clean section
  - remove %defattr lines
  - add a joker for libqrencode.so.* files


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-2
changelog:
  - Add patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    + fix-LIBPTHREAD-macro.patch
  - Resolves: #795582 (qrencode-devel: Malformed pkgconfig file causes build to
    fail ("@LIBPTHREAD@: No such file or directory"))


author: Matthieu Saulnier <fantom@fedoraproject.org> - 3.3.1-1
changelog:
  - update to 3.3.1
  - remove "Group" tag in spec file
  - fix manfile suffix
  - remove patch to fix improper LIBPTHREAD macro in the pkgconfig file:
    - upstream issue


author: Jan Grulich <jgrulich@redhat.com> - 1:4.8.7-4
changelog:
  - Bump build version for RPM to not consider z-stream build as newer
    Revert fix for font cache check in QFontEngineFT::recalcAdvances()
    Resolves: bz#1684167


author: Jan Grulich <jgrulich@redhat.com> - 1:4.8.7-8
changelog:
  - Fix QImage allocation failure in qgifhandler
    Resolves: bz#1667863

  - Fix QTgaFile CPU exhaustion
    Resolves: bz#1667879

  - Fix QBmpHandler segmentation fault on malformed BMP file
    Resolves: bz#1667862


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-8
changelog:
  - make 10-qt5-check-opengl2.sh xinit script more robust
  - enable journald support for el7+ (#1315239)


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-3
changelog:
  - Fix multilib issue with qtcore-config.h header file
    Resolves: bz#1534528

  - Move libQt5EglFSDeviceIntegration lib into correct subpackage
    Resolves: bz#1792680


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-4
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814740
    Resolves: bz#1814685


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-6
changelog:
  - macros.qt5: we really only want the null-pointer-checks flag here
    and definitely no arch-specific ones


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-4
changelog:
  - backport upstream fixes
  - drop -fno-delete-null-pointer-checks hack (included in qt5-rpm-macros as needed now)


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-2
changelog:
  - libwebp security fixes:
    Resolves: bz#1961742
    Resolves: bz#1961743
    Resolves: bz#1961744
    Resolves: bz#1961745


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-6
changelog:
  - obsolete quagga-sysvinit subpackage
  - use macro to specify location where to install tmpfiles configuration file
  - fix rpm scripts handling documentation in info format


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.1-7
changelog:
  - quagga is service which might implement networking, thus it should not have
    WantedBy=network.target in its systemd configuration
  - resolves: #976883


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.3-1
changelog:
  - update to 0.99.22.3
  - disable ospfapi and ospfclient
  - fix bogus dates in changelog
  - resolves : #984532


author: Michal Sekletar <msekleta@redhat.com> - 0.99.22.4-4
changelog:
  - fix link to upstream tarball (#1059219)
  - reference pidfiles of quagga daemons in service files (#842309)


author: Ondřej Lysoněk <olysonek@redhat.com> - 0.99.22.4-5
changelog:
  - Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
    certain forms of UPDATE message allowing to crash or potentially execute
    arbitrary code
  - Resolves: rhbz#1546015


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-4
changelog:
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-11.1
changelog:
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1316440)
  - Add nfs-rquotad.service alias for backward compatibility (bug #1316440)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1316440)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-18
changelog:
  - Distinguish between none quota limits and no allocated resources in quota(1)
    tool (bug #1601109)


author: Prarit Bhargava <prarit@redhat.com>
changelog:
  - Initial import from https://github.com/andikleen/mce-inject.git
  - Initial import from git://git.kernel.org/pub/scm/linux/kernel/git/gong.chen/aer-inject.git


author: Prarit Bhargava <prarit@redhat.com>
changelog:
  - Initial import from git://git.kernel.org/pub/scm/utils/cpu/mce/mce-test.git
  - updated mce-inject to commit 4cbe4632


author: Honza Horak <hhorak@redhat.com> - 5.8.1-2
changelog:
  - Provides: bundled(gnulib) added, as per #821786
  - minor spec file clean up
  - install-info run in postin/postun


author: Doug Ledford <dledford@redhat.com> - 7.0-3.10.1
changelog:
  - Update numbering scheme.  Version now corresponds to the version of
    rhel it is built under, release is a dual component number that
    gives the upstream kernel version of the InfiniBand stack used
    in our current release (aka, the 3.10 above) followed by our
    own release number (aka .1).
  - Make rds loading conditional on the rds module existing (it has
    been disabled in some kernels)
  - Update udev rule script and rdma-kernel-init scripts to offload
    node description setting to udev, and make it more reliable
  - Resolves: bz1018658


author: Doug Ledford <dledford@redhat.com> - 7.0-3.10.2
changelog:
  - Add a comment to the udev rules file for IPoIB renaming
  - Move rdma commands to libexecdir.  They aren't intended to be run
    manually by humans and this avoids the errors about man pages
    not being present
  - Move udev rules to /usr/lib/udev
  - Resolves: bz1012796


author: Doug Ledford <dledford@redhat.com> - 7.0_3.10_rc8-1
changelog:
  - Update Requires to systemd-units instead of just systemd
  - Reset numbering back to what it is supposed to be, but change the
    format to mass rebuilds don't cause a problem in the future
  - Related: bz1018658, bz1056145


author: Doug Ledford <dledford@redhat.com> - 7.0_3.13_rc8-2
changelog:
  - Add a dracut module so the rdma stack can be brought up in
    by the initramfs
  - Related: bz1064316


author: Doug Ledford <dledford@redhat.com> - 7.0_3.13_rc8-3
changelog:
  - Use is_available_wait from new initscripts so we wait for link to
    come up.  These keeps high speed devices from failing to start
    because their link is slow to initialize.
  - Related: bz1078915


author: Doug Ledford <dledford@redhat.com> - 7.0-3.17
changelog:
  - Update version to match kernel submission
  - Fix for usnic_verbs instead of enic in udev rules file
  - Add support for setting the GUIDs and MACs of SRIOV vfs
  - Resolves: bz1094538


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-4
changelog:
  - Move init of all RDMA related kernel modules from various user space
    driver libraries (libmlx4, libcxgb3, libcxgb4, etc.) to rdma
    package and make those packages require rdma package.  This excludes
    libipathverbs since the modprobe files are provided by upstream.
  - Resolves: bz1164618


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-5
changelog:
  - Bump and rebuild to eliminate an rpm version compare issue on alternate
    arches that don't use the .el7 dist tag
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 7.1_3.17-6
changelog:
  - The system libmlx4.conf file had the name of the config script
    backwards and on systems with ethernet devices in ib/eth mode,
    the eth port was not getting set properly
  - Related: bz1164618


author: Michal Schmidt <mschmidt@redhat.com> - 7.2_3.17-2
changelog:
  - udev rules: Defer setting of node description to rdma-ndd if it is
    installed.
  - Related: bz1169968


author: Jarod Wilson <jarod@redhat.com> - 7.3_4.7-rc2-1
changelog:
  - Bump version to reflect rdma stack backport target level in 7.3
  - Verify fix to ensure all rdma drivers get into initrd
  - Related: bz1303589


author: Jarod Wilson <jarod@redhat.com> - 7.3_4.7-rc2-3
changelog:
  - Add target modules to initrd module include list for rdma service start in initrd
  - Add iscsi modules to allow iser/iscsi network install/boot
  - Resolves: bz1347548, bz1093972


author: Jarod Wilson <jarod@redhat.com> - 7.3_4.7-rc2-5
changelog:
  - Add a knob for loading on tech preview (i40iw) hardware
  - Make "is module loaded" function name more accurate
  - Related: bz1263936


author: Sumit Bose <sbose@redhat.com> - 0.16.1-6
changelog:
  - Resolves: rhbz#1258745
  - Resolves: rhbz#1258488
  - Resolves: rhbz#1267563
  - Resolves: rhbz#1293390
  - Resolves: rhbz#1273924
  - Resolves: rhbz#1274368
  - Resolves: rhbz#1291924


author: Sumit Bose <sbose@redhat.com> - 0.16.1-10
changelog:
  Use current Samba options and read NetBIOS name from keytab
  - Resolves: rhbz#1484072
  - Resolves: rhbz#1370457


author: Sumit Bose <sbose@redhat.com> - 0.16.1-12
changelog:
  Fixes for RHEL-7.9
  - Resolves: rhbz#1625001
  - Resolves: rhbz#1625005
  - Resolves: rhbz#1638396
  - Resolves: rhbz#1714223
  - Resolves: rhbz#1832134


author: Stef Walter <stefw@redhat.com> - 0.14.6-1
changelog:
  - Update to upstream 0.14.6 point release
  - Set 'kerberos method = system keytab' in smb.conf properly [#997580]
  - Limit Netbios name to 15 chars when joining AD domain [#1001667]


author: Stef Walter <stefw@redhat.com> - 0.14.6-5
changelog:
  - Don't crash when full_name_format is not in sssd.conf [#1051033]
    This is a regression from a prior update.


author: Stef Walter <stefw@redhat.com> - 0.16.0-1
changelog:
  - Updated to upstream 0.16.0
  - Resolves: rhbz#1174911
  - Resolves: rhbz#1142191
  - Resolves: rhbz#1142148


author: Pavel Cahyna <pcahyna@redhat.com> - 2.00-5
changelog:
  - cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
    Upstream PR#1685, bz1532676


author: Pavel Cahyna <pcahyna@redhat.com> - 2.00-6
changelog:
  - Ensure that NetBackup is started automatically upon recovery (PR#1544)
    Also do not kill daemons spawned by sysinit.service at the service's end
    (PR#1610, applies to NetBackup and also to dhclient)
    Resolves #1506231
  - Print a warning if grub2-mkimage is about to fail and suggest what to do.
    bz#1492177
  - Update the patch for #1388653 to the one actually merged upstream (PR1418)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-1
changelog:
  - Rebase to version 2.4, drop patches integrated upstream
    Resolves #1534646 #1484051 #1498828 #1571266 #1496518


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-3
changelog:
  - Backport fixes for upstream bugs 1974 and 1975
  - Apply upstream PR1954 (record permanent MAC address for bond members)
  - Apply upstream PR2004 (support for custom network interface naming)
  - Backport fix for upstream bug 1926 (support for LACP bonding and teaming)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-7
changelog:
  - Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
    Resolves: rhbz1631183
  - Apply upstream patch PR1885
    Partition information recorded is unexpected when disk has 4K block size
    Resolves: rhbz1610638
  - Apply upstream patch PR1887
    LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
    Resolves: rhbz1610647
  - Apply upstream patch PR1993
    Automatically exclude $BUILD_DIR from the backup
    Resolves: rhbz1655956
  - Require xorriso instead of genisoimage, it is now the preferred method
    and supports files over 4GB in size.
    Resolves: rhbz1462189


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-8
changelog:
  - Backport fix for upstream issue 2187 (disklayout.conf file contains
    duplicate lines, breaking recovery in migration mode or when
    thin pools are used). PR2194, 2196.
    Resolves: rhbz1732328


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-9
changelog:
  - Apply upstream PR2173 - Cannot restore using Bacula method
    due to "bconsole" not showing its prompt
    Resolves: rhbz1726982


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-10
changelog:
  - Apply upstream PR2122: add additional NBU library path to fix support for
    NetBackup 8.
    Resolves: rhbz1700807


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-11
changelog:
  - Apply upstream PR2122: add additional NBU library path to fix support for
    NetBackup 8.
    Resolves: rhbz1700807
  - Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
    Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
    because it thinks that the Docker daemon is running and hits the problem
    with empty docker_root_dir.
  - Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
    list of users to clone, which can lead to bash overflow with lots of users
    and groups per user and to wrong passwd/group files in the rescue system.
    Resolves: rhbz1692575
  - Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
    chroot, which causes LVM to hang, especially if rebuilding initramfs.
    Resolves: rhbz1697815
  - Backport upstream PR 2218: avoid keeping build dir on errors
    by default when used noninteractively
    Resolves: rhbz1693608


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-15
changelog:
  - Backport PR2608:
    Fix setting boot path in case of UEFI partition (ESP) on MD RAID
    Resolves: rhbz1945869
  - Backport PR2625 & 2675
    Prevents accidental backup removal in case of errors
    Resolves: rhbz1843585
  - Fix rsync error and option handling
    Fixes metadata storage when rsync user is not root
    Resolves: rhbz1947064
  - Changes for NetBackup (NBU) support, upstream PR2544
    Resolves: rhbz2031833
  - On POWER add bootlist & ofpathname to the list of required programs
    conditionally (bootlist only if running under PowerVM, ofpathname
    always except on PowerNV) - upstream PR2665, add them to package
    dependencies
    Resolves: rhbz1983008
  - On POWER mount /sys in the chroot, otherwise ofpathname does not work
    and we risk ending up with not instlaling the bootloader properly
    Resolves: rhbz1983000


author: Zoltan Kota <z.kota[AT]gmx.net> 3.6-29
changelog:
  - Fix build on x86_64. Run autoreconf to update config files.
    autoconf >= 2.64 needs to patch the flex.m4 file.
    Fixing FTBFS bug #564601.


author: Neil Horman <nhorman@tuxdriver.com> - 0.1-2
changelog:
  - Updated requires for python3
  - Removed unneeded BuildRequires
  - Globed the inclusion of man page
  - Fixed license file tagging


author: Dan Varga <dvarga@redhat.com> - 1.0.1-0
changelog:
  - Add man pages
  - New certificate chain for cert-api.access.redhat.com
  - Better auto configuration for satellite installations


author: Dan Varga <dvarga@redhat.com> - 1.0.5-0
changelog:
  - Automatically retry failed uploads when invoked via cron
  - Update python-requests dependency to >= 2.6
  - Add --unregister option
  - --no-gpg fix
  - Remove --weekly option
  - Add --quiet and --silent options
  - Default cron to quiet
  - Fix satellite 5 proxy auto configuration
  - Remove .registered and .unregistered files on uninstallation
  - lowercase -> lower()
  - Resolves: bz1237096, bz1243024, bz1247363


author: Paul W. Frields <pfrields@redhat.com> - 7-9
changelog:
  - New content tarball to fix errant translation files (Resolves: rhbz1055849)
  - Remove obsolete feedback.html and unsupported locale


author: Ondrej Vasik <ovasik@redhat.com> - 4.1-14
changelog:
  - require spax instead of pax (more POSIX compatible) (#965658)
  - require another set of perl modules in -languages (#959129)
  - polish a bit the nsswitch.conf hack - include mdns4_minimal (#915147)


author: Ondrej Vasik <ovasik@redhat.com> - 4.1-16
changelog:
  - add provides/obsoletes for redhat-lsb-compat to better
    deal with possible upgrade RHEL-6->RHEL-7 (#976792)


author: Ondrej Vasik <ovasik@redhat.com> - 4.1-18
changelog:
  - Require sil-abyssinica-fonts in supplemental(#994341)
  - Fully specify requirements on subpackages(#971386)


author: Matthias Clasen <mclasen@redhat.com> - 12.0.1-1
changelog:
  * Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.0.1-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Florian Festi <ffesti@redhat.com> - 9.1.0-65
changelog:
  - Fix fix for ppc64le libtool issues (#1113618)
  - As this package is noarch we need to have a runtime solution


author: Florian Festi <ffesti@redhat.com> - 9.1.0-70
changelog:
  - Be stricter with she bang lines in find-requires (#1179523)
  - Use --with-cpu=power8 for ppc64le (#1213268)
  - Fix stripping of binaries for changed file output (#1250015)
  - Fix find-provides.libtool for new libtool style (#1061619)
  - Restore UID/ GID on jar files (#1270053)
  - Fix latest_kernel macro (#1323087)
  - Add _pkgdocdir and _docdir_fmt macro (#1057327)
  - Fix detection for perl files in old depencency generator (#1324003)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 9.1.0-84
changelog:
  - Revert dropping brp-java-repack-jars
  - fix generating group owner name when processing a jar file (#1460628)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-85
changelog:
  - Fix generation of kernel module versioned symbol dependencies for the case
    when module depends on a symbol with the same name as the one present
    in kernel but with a different version (#1619235)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-86
changelog:
  - Add support for compressed kernel modules to find-provides,
    find-provides.ksyms, find-requires, find-requires.ksyms (#1619891)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-87
changelog:
  - Revert to usage of join instead of comm in find-requires.ksym:mod_requires()
    as generated "Requires:" and "Provides:" lists have different format
    and unsuitable for processing with comm (#1619235)


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - API update to bring in line with current version of Strata.
    Changes include:
     - Update to Recommendations API
     - Pagination of Cases
  - Additional fixes for proxy handling, and traceability of exceptions


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Downloads:
    - Fixes to download handling to avoid excessive memory use
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - Various updates to source, including:
    - Pagination of 'listcases'
    - Better debugability
    - Splitfile abilities to 'addattachment'
    - Recommendations support
    - Changes to 'downloadall' attachment handling


author: Nigel Jones <nigjones@redhat.com> - 0.9.3-1
changelog:
  - Pagination bug fix to fix an offsetting bug that could contribute
    to missing, or duplicate results.


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Diagnostics:
    - Opening a case will now trigger the case recommendations engine
      prior to opening the case.
    - Extracted backtraces from kernel vmcores can be passed to
      Ask Shadowman at the users request
  - Case Handling:
    - modifycase can be triggered on a selected case
    - Per above, opencase/diagnostics support
  - Plugins:
    - Ability for Vendor/L3 plugins
    - Sample 'ACMECorp' plugin + README.plugins in documentation directory.
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Keith Robertson <kroberts@redhat.com> - 0.9.5-2
changelog:
  - Various updates including;
    - Filtering and pagination of listcases
    - casegroup command
    - opencase is in the analyze and diagnose commands


author: Keith Robertson <kroberts@redhat.com> - 0.9.6-0
changelog:
  - Resolves: rhbz#983968
  - Resolves: rhbz#1036707
  - Resolves: rhbz#1036713
  - Resolves: rhbz#1036783
  - Resolves: rhbz#1037647


author: David Shea <dshea@redhat.com> - 0.8.9-1
changelog:
  - backup old product id certificates before installation of new ones (jdornak)
    Resolves: rhbz#1148783


author: David Shea <dshea@redhat.com> - 2:0.7.3-0
changelog:
  - Set the epoch to 2 to provide a clean upgrade path between RHEL major versions
    Related: rhbz#1012668


author: David Shea <dshea@redhat.com> - 2:0.7.4-1
changelog:
  - Fix the systemd Requires: line.
    Resolves: rhbz#1035461
  - Drop /run/initramfs/upgrade.conf
    Related: rhbz#1030561


author: David Shea <dshea@redhat.com> - 2:0.7.6-1
changelog:
  - Remove the URL from the Source0 line (dshea)
    Resolves: rhbz#1056730
  - fix UnboundLocalError with fedup --device (wwoods)
    Resolves: rhbz#1056717


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-9
changelog:
  - Install LICENSE file with javadoc package
  - Add maven POM file
  - Update to current packaging guidelines
  - Convert versioned JAR to unversioned


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.6.3-1
changelog:
  - Upstream 0.6.3
  - Upstream fix for mixed-case packages and md5 warnings (obsoletes patch)
  - Minor fixes to functionality


author: David Vossel <dvossel@redhat.com> - 3.9.5-28
changelog:
  - Updates to nfs server related agent.
  - Introduces nfsnotify for sending NFSv3 NSM state change
    notifications allowing NFSv3 clients to reclaim locks.

    Resolves: rhbz#1091101


author: David Vossel <dvossel@redhat.com> - 3.9.5-29
changelog:
  - Support the check_user and check_passwd galera resource-agent
    options.
  - Minor NFS agent updates.

    Resolves: rhbz#1116166
    Resolves: rhbz#1091101


author: David Vossel <dvossel@redhat.com> - 3.9.5-30
changelog:
  - Support monitor of lxc without requiring libvirt.
  - Wait for filesystem modules to load during start.
  - Warn users managing clustered LVM when lvmetad is in use.
  - Restore VirtualDomain default start stop timeout values.
  - Support exit reason string
  - Auto set lvm locking type to clustered when clvmd is in use.

  Resolves: rhbz# 1083041
  Resolves: rhbz# 1083231
  Resolves: rhbz# 1097593
  Resolves: rhbz# 1105655
  Resolves: rhbz# 1128933
  Resolves: rhbz# 773395


author: David Vossel <dvossel@redhat.com> - 3.9.5-31
changelog:
  - Man page updates give pcs config examples
  - add iscsi agent support
  - add infiniband support to ethmonitor
  - add resource-agent support of exit reason string
  - add safe umount option to Filesystem resource agent

    Resolves: rhbz#1058102
    Resolves: rhbz#1118029
    Resolves: rhbz#1122285
    Resolves: rhbz#1128933
    Resolves: rhbz#1095944


author: David Vossel <dvossel@redhat.com> - 3.9.5-32
changelog:
  - Fixes iSCSILogicalUnit syntax error
  - Fixes mysql stop operation when db storage is unavailable

    Resolves: rhbz#1118029
    Resolves: rhbz#1138871


author: David Vossel <dvossel@redhat.com> - 3.9.5-33
changelog:
  - Merges latest upstream patches for galera agent
  - Merges latest upstream patchs for exit reason string

    Resolves: rhbz#1116166
    Resolves: rhbz#1128933


author: David Vossel <dvossel@redhat.com> - 3.9.5-34
changelog:
  - Fixes mysql agents behavior when monitoring resource instance
    when environment validation fails.

    Resolves: rhbz#1138871


author: David Vossel <dvossel@redhat.com> - 3.9.5-35
changelog:
  - Introduces docker resource-agent for managing docker containers.
    The docker agent is being released as tech preview.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-36
changelog:
  - Fixes cleaning up stale docker containers during stop if
    container instance failed.

    Resolves: rhbz#1135026


author: David Vossel <dvossel@redhat.com> - 3.9.5-37
changelog:
  - Rename docker agent's 'container' arg to 'name' to avoid confusion
    with pacemaker's metadata 'container' argument.
  - Introduce monitor_cmd into docker agent.

    Resolves: rhbz#1135026


author: Ade Lee <alee@redhat.com> - 2.3.2-11
changelog:
  - Removed unneeded maven-checkstyle-plugin BR
  - Removed Tomcat 6 dependency
  - Replaced maven BR with maven-local


author: Ade Lee <alee@redhat.com> - 2.3.2-12
changelog:
  - Removed modules not needed for pki-core
  - Bugzilla # 973224 - resteasy-base must be split into subpackages to 
    simplify dependencies.  With help from msrb.


author: Tom Lane <tgl@redhat.com> 9.0.0-1
changelog:
  - Update pg_filedump to version 9.0.0, to support PostgreSQL 9.0.
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update pg_filedump to version 9.1.0, to support PostgreSQL 9.1.
  - Point to new upstream home at pgfoundry.org.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.7R3-3
changelog:
  - Crosslink javadocs with Java's.
  - Drop versioned jars and javadoc dir.
  - Exclude patch backup files from -examples.


author: Elliott Baron <ebaron@redhat.com> - 1.7R5-1
changelog:
  - Update to 1.7R5.
  - Add rhino-backout-686806.patch for backward compatibility.
  - Resolves: rhbz#1350331


author: Milan Zazrivec <mzazrivec@redhat.com> 2.0.2-2
changelog:
  - Related: #1038694 - remove text from registration screen
  - Resolves: #1038694 - new error icon in gnome


author: alutsiuk <alutsiuk@cloudlinux.com>, rtulchii <rtulchii@cloudlinux.com> 2.0.2-40.cloudlinux
changelog:
  - RHNCTL-43 implement link_server logic
  - CLKRN-917: added installing dracut-squash on 7 hybrid for KMODLVE-467


author: alutsiuk <alutsiuk@cloudlinux.com> 2.0.2-41.cloudlinux
changelog:
  - RHNCTL-47 implement linking status for cl-link-to-cln utility
  - RHNCLT-46: Remove deprecated CLN api calls (hardware, packages, virtinfo)
  - RHNCTL-48 Add linkable property to output of cl-link-to-cln --linking-status


author: Miroslav Suchý <msuchy@redhat.com> 1.0.1-1
changelog:
  - 585386 - set properly acl for /var/spool/up2date/loginAuth.pkl
  - make read_cpuinfo() more readable


author: Miroslav Suchý <msuchy@redhat.com> 1.1.7-1
changelog:
  - l10n: Updates to Chinese (China) (zh_CN) translation
    (leahliu@fedoraproject.org)
  - 601683 - properly import get_computer_info routine (mzazrivec@redhat.com)
  - 596237 - use correct constant in HardwareWindow (tui) (mzazrivec@redhat.com)
  - 596237 - use constants in SendingWindow (mzazrivec@redhat.com)
  - 596237 - use constants in SendWindow (mzazrivec@redhat.com)
  - 596237 - use constants in PackagesWindow (mzazrivec@redhat.com)
  - 596237 - use constants in HardwareWindow (mzazrivec@redhat.com)
  - 596237 - use constants in OSReleaseWindow & AlreadyRegisteredWindow
    (mzazrivec@redhat.com)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - 600316 - don't traceback for zero subscribed channels (mzazrivec@redhat.com)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)
  - l10n: Updates to Spanish (Castilian) (es) translation
    (gguerrer@fedoraproject.org)
  - 598890 - always return product version as string (mzazrivec@redhat.com)
  - l10n: Updates to Spanish (Castilian) (es) translation
    (gguerrer@fedoraproject.org)
  - Remove three more exceptions that are not used in our code base.
    (jpazdziora@redhat.com)
  - The rhn-client-tools ChangeLog has't been updated since 2002, removing.
    (jpazdziora@redhat.com)
  - Removing WarningDialog, OkDialog, and QuestionDialog that are not used in our
    code. (jpazdziora@redhat.com)
  - Remove 23 exceptions that are not used in our code base.
    (jpazdziora@redhat.com)
  - Method resetServerList not used in our code, removing.
    (jpazdziora@redhat.com)
  - When startRhnCheck was replaced by spawnRhnCheckForUI, it became unused,
    removing. (jpazdziora@redhat.com)
  - Method getFailedSystemSlots not used in our code, removing.
    (jpazdziora@redhat.com)
  - get_device_property not used in our code, removing. (jpazdziora@redhat.com)
  - termsAndConditions not used in our code, removing. (jpazdziora@redhat.com)
  - sat_supports_virt_guest_registration not used in our code, removing.
    (jpazdziora@redhat.com)
  - finishMessage not used in our code, removing. (jpazdziora@redhat.com)
  - When autoActivateNumbersOnce was removed, autoActivatedHardwareInfo was made
    unused, removing. (jpazdziora@redhat.com)
  - When ActivateSubscriptionPage was removed, activatedRegistrationNumber was
    made unused, removing. (jpazdziora@redhat.com)
  - 597263 - give the focus to the ButtonBar (and thus to the Yes button), to
    behave as RHEL 5 did. (jpazdziora@redhat.com)
  - 596101 - skip the chooseChannelPage when going Back as well, if it should not
    be shown. (jpazdziora@redhat.com)
  - 596102 - fit hw profile into a 2x6 table (mzazrivec@redhat.com)
  - 595688 - cancel busy cursor after ValidationError (michael.mraka@redhat.com)
  - 595837 - write nice error in case of "connection reset by peer" and xmlrpc
    protocol error (msuchy@redhat.com)
  - 585188 - we need to implement fatalError for loginPageApply and
    createProfilePageApply. (jpazdziora@redhat.com)
  - Remove except which cannot be reached. (jpazdziora@redhat.com)
  - 585188 - refactor the RHN Register firstboot code to match firstboot 1.110 on
    Fedora 12 and RHEL 6. (jpazdziora@redhat.com)
  - 585188 - only install legacy firstboot on RHEL 5 (and earlier), the new
    firstboot for other systems. (jpazdziora@redhat.com)
  - 585188 - the firstboot modules for RHEL 5 shall retire in firstboot-legacy-
    rhel5. (jpazdziora@redhat.com)
  - 593194 - fix creating the $(PREFIX)/usr/share/setuptool/setuptool.d when
    building the package. (jpazdziora@redhat.com)
  - 595669 - fix regexp and do not fail if regexp do not match
    (msuchy@redhat.com)
  - whitespace cleanup (msuchy@redhat.com)
  - We don't need hwdata target anymore (mzazrivec@redhat.com)
  - 580493 - use correct product logos in rhn_register (gui)
    (mzazrivec@redhat.com)
  - 557059 - do not fail on IBM-ESXS controler where ID_PATH is not set
    (msuchy@redhat.com)
  - 580489 - fix requires for rhn-setup-gnome (mzazrivec@redhat.com)
  - python-hwdata finaly made it into Fedora and Epel so we can remove from this
    package and depend on python-hwdata (msuchy@redhat.com)
  - 593194 - 99rhn_register to add RHN Register to setup's list of tools.
    (jpazdziora@redhat.com)
  - The bugzilla 556290 had errata released, python-setuptools should be pulled
    in by python-coverage. (jpazdziora@redhat.com)
  - 584780 - move the firstboot _gui.* files to rhn-setup-gnome.
    (jpazdziora@redhat.com)
  - 557059 - we cannot have class None. (jpazdziora@redhat.com)
  - 591798  - Completly remove hal code from rhn-client-tools for F-13 and RHEL-6
    (msuchy@redhat.com)
  - 591422 - add hwdata.py to rhn-client-tools. (jpazdziora@redhat.com)
  - l10n: Updates to German (de) translation (ttrinks@fedoraproject.org)
  - l10n update .pot and .po files for rhn-client-tools (msuchy@redhat.com)
  - l10n - translate desktop file too (msuchy@redhat.com)
  - cleanup - removing translation file, which does not match any language code
    (msuchy@redhat.com)
  - update po files for rhn-client-tools (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.9-1
changelog:
  - Clean up a few remaining references to kbase 6227
    (joshua.roys@gtri.gatech.edu)
  - 604101 - kbase article 6227 changed name & location (mzazrivec@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.10-1
changelog:
  - 604106 - finish page should be loaded even without network
    (msuchy@redhat.com)
  - 612547 - update copyright clauses up until 2010. (jpazdziora@redhat.com)
  - 607599 - prevent firstboot from show_all()-ing what we have hidden.
    (jpazdziora@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.11-1
changelog:
  - 614389 - add missing import (msuchy@redhat.com)
  - basic framework for prefetching content from spacewalk (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.12-1
changelog:
  - we want to pre-cache if server *has* staging ability (msuchy@redhat.com)
  - use correct rhnserver class (msuchy@redhat.com)
  - l10n: Updates to Swedish (sv) translation (goeran@fedoraproject.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.1.13-1
changelog:
  - add parameter cache_only to all client actions (msuchy@redhat.com)
  - simplify code (msuchy@redhat.com)
  - put parser of action xml to separate function (msuchy@redhat.com)
  - l10n: Updates to Italian (it) translation (fvalen@fedoraproject.org)


author: Milan Zazrivec <mzazrivec@redhat.com> 1.1.14-1
changelog:
  - 618267 - all data in F12+ should be in unicode, lets decode it
  - 619098 - take manufacturer from system group
  - 618267 - add missing import and foo
  - update .po files
  - Revert "update .po files"
  - 618267 - encode latin-1 characters to unicode
  - 617425 - add missing 'the's
  - 617425 - point the user to the correct menu item
  - add man page for rhn-channel as alias for spacewalk-channel
  - default for kwargs should be {}
  - update .po files
  - 616371 - typo fix
  - add parameter cache_only to up2date_config.* actions
  - enable caching for action errata.update


author: Milan Zazrivec <mzazrivec@redhat.com> 1.2.1-1
changelog:
  - 623137 - merge translated strings with .desktop file (mzazrivec@redhat.com)
  - update .po and .pot files for rhn-client-tools (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.2.2-1
changelog:
  - 625778 - require newer yum-rhn-plugin
  - 554693 - networkRetries should be positive number
  - l10n: Updates to Russian (ru) translation
  - l10n: Updates to Telugu (te) translation


author: Michael Mraka <michael.mraka@redhat.com> 1.2.4-1
changelog:
  - 559797 - fixed configuration file name
  - Sort the available channels so that the listing is not random.


author: Jan Pazdziora 1.2.6-1
changelog:
  - 603028 - when checking package architecture during errata update, allow
    transition to and from noarch.


author: Miroslav Suchý <msuchy@redhat.com> 1.2.7-1
changelog:
  - 632203 - fix comment to corespond with code, decoding unicode to unicode
    produce traceback (msuchy@redhat.com)
  - l10n: Updates to Oriya (or) translation (mgiri@fedoraproject.org)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.2.8-1
changelog:
  - 638981 - encode smbios data before sending over xmlrpc (msuchy@redhat.com)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)


author: Jan Pazdziora 1.2.11-1
changelog:
  - Update copyright years in the rest of the repo.
  - update .po and .pot files for rhn-client-tools
  - require versions which can handle cache_only (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.1-1
changelog:
  - 655310 - replace gethostbyname by getaddrinfo (msuchy@redhat.com)
  - 655310 - send IPv6 addresses to server (msuchy@redhat.com)
  - 481721 - _ts report epoch as int, but satelite and rhn use string, this does
    not work for comparement like pkg in [['name', 'version', 'release', 'epoch',
    'arch']..] (msuchy@redhat.com)
  - Bumping package versions for 1.3. (jpazdziora@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.7-1
changelog:
  - update .po and .pot files for rhn-client-tools
  - 651789 - fail if adding/removal of channels fail
  - 651792 - list all available child channels related to system
  - localize spacewalk-channel script
  - 651857 - print error if you specify --add or --remove, but you do not specify
    any channel
  - 651857 - removing forgotten lines, which makes no sense and cause TB
  - 652424 - return back useNoSSLForPackages option
  - 668809 - mention the requirement to use FQDN


author: Miroslav Suchý <msuchy@redhat.com> 1.3.9-1
changelog:
  - Revert "update .po and .pot files for rhn-client-tools"
  - Revert "removing msgctxt which rhel5 could not handle"


author: Tomas Lestach <tlestach@redhat.com> 1.3.10-1
changelog:
  - updating Copyright years for year 2011 (tlestach@redhat.com)
  - update .po and .pot files for rhn-client-tools (tlestach@redhat.com)
  - 602609 - fix DeprecationWarning when using gtk.MessageDialog()
    (mzazrivec@redhat.com)
  - 617066 - fix "Why register" dialog size (msuchy@redhat.com)
  - 667739 - use accessibility tags (msuchy@redhat.com)
  - 626752 - correct virt. type detection for RHEL-6 FV Xen guests
    (mzazrivec@redhat.com)
  - 651403 - reference to RHEL6 as actuall system (msuchy@redhat.com)
  - dead code: removal of function foobar() (msuchy@redhat.com)
  - 649233 - reset busy mouse cursor back to arrow after unexpected error
    (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.11-1
changelog:
  - break circular import
  - 580479 - put new submodule into package
  - W: 28: Unused import glade
  - 580479 - Graphical firstboot should offer EUS channel selection
  - 581482 - make tui consistent with gui
  - 596108 - firstboot: don't allow multiple system registrations
  - 606222 - label could not have focus


author: Miroslav Suchý <msuchy@redhat.com> 1.4.1-1
changelog:
  - fix typo
  - 671039 - add warning about subsription manager to TUI part of rhn_register
  - 671039 - add warning about subsription manager to GUI part of rhn_register
  - l10n: Updates to German (de) translation (delouw@fedoraproject.org)
  - 671041 - substitute RHN with "RHN Satellite or RHN Classic"
  - 671032 - disable rhnplugin by default and enable it only after successful
    registration
  - Bumping package versions for 1.4 (tlestach@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.3-1
changelog:
  - Revert "provide path to puplet-screenshot.png" (msuchy@redhat.com)
  - 666860 - remove glade warnings (msuchy@redhat.com)
  - provide path to puplet-screenshot.png (msuchy@redhat.com)
  - move <accessibility> in front of <signal> (msuchy@redhat.com)
  - 580479 - do not let combo box to fill available space (msuchy@redhat.com)
  - 651792 - if system is not registered, print nice error insted of TB
    (msuchy@redhat.com)
  - 651857 - fix typo in variable name (msuchy@redhat.com)
  - 671039 - do not Traceback if system was never registered (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.4-1
changelog:
  - 683546 - optparse isn't friendly to translations in unicode
  - update .po files
  - 679217 - mention subscription manager as alternative to rhn_register


author: Miroslav Suchý <msuchy@redhat.com> 1.4.6-1
changelog:
  - 684245 - lookup of the subscription-manager page via localized title is
    volatile, let's use its __module__ name. (jpazdziora@redhat.com)
  - 624748 - report virtual network interfaces (mzazrivec@redhat.com)


author: Simon Lukasik <slukasik@redhat.com> 1.4.12-1
changelog:
  - Move code for enabling yum-rhn-plugin to separate module
    (slukasik@redhat.com)
  - Extract method: setDebugVerbosity (slukasik@redhat.com)
  - Introduce pkgUtils as an abstraction of either debUtils or rpmUtils
    (slukasik@redhat.com)
  - Introduce Debian equivalent of rpmUtils. (slukasik@redhat.com)
  - Removing packages.verifyAll capability; it was never used.
    (slukasik@redhat.com)
  - OS information is platform dependent; introducing a platform interface.
    (slukasik@redhat.com)
  - versionOverride applies only to version; moving to getVersion
    (slukasik@redhat.com)
  - Updated unittests (slukasik@redhat.com)


author: Miroslav Suchý 1.4.13-1
changelog:
  - update copyright years (msuchy@redhat.com)
  - download spacewalk.rhn-client-tools from Transifex (msuchy@redhat.com)


author: Miroslav Suchý 1.5.1-1
changelog:
  - enhance getOSVersionAndRelease to find SUSE distributions (mc@suse.de)
  - Bumping package versions for 1.5 (msuchy@redhat.com)


author: Jan Pazdziora 1.5.2-1
changelog:
  - Revert "some usb device may not return product" (msuchy@redhat.com)
  - fix typo in key "product" vs. "PRODUCT" (msuchy@redhat.com)
  - some usb device may not return product (msuchy@redhat.com)


author: Jan Pazdziora 1.5.3-1
changelog:
  - modify spec file to build rhn-client-tools on SUSE (mc@suse.de)
  - get model id from PRODUCT key (msuchy@redhat.com)
  - <type exceptions.UnboundLocalError>: local variable usb referenced before
    assignment (msuchy@redhat.com)


author: Miroslav Suchý 1.5.8-1
changelog:
  - 683200 - u'foo'.decode('utf-8') does not work, while unicode(u'foo') works
    and is idempotent (msuchy@redhat.com)
  - 683200 - if I want url in unicode, I must us decode - remember that
    (msuchy@redhat.com)


author: Jan Pazdziora 1.5.10-1
changelog:
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - Download translations from Transifex for rhn-client-tools (msuchy@redhat.com)


author: Miroslav Suchý 1.5.11-1
changelog:
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - add missing \n and hyperlink to zh_TW (msuchy@redhat.com)
  - add missing \n and hyperlink to zh_CN (msuchy@redhat.com)
  - fix typo in te.po (msuchy@redhat.com)


author: Miroslav Suchý 1.5.13-1
changelog:
  - forward port translation from RHEL6 (msuchy@redhat.com)
  - forward port translation from RHEL5 (msuchy@redhat.com)


author: Jan Pazdziora 1.5.16-1
changelog:
  - Merging Transifex changes for rhn-client-tools.
  - Fixing the `msgid' and `msgstr' entries do not both end with '\n' bug.
  - Download translations from Transifex for rhn-client-tools.


author: Jan Pazdziora 1.6.1-1
changelog:
  - The rhn-client-tools/doc/releases.txt is out of date, removing.
  - We only support version 5 and newer of RHEL, removing conditions for old
    versions.
  - We only support version 14 and newer of Fedora, removing conditions for old
    versions.


author: Jan Pazdziora 1.6.2-1
changelog:
  - 713548 - enable running rhn-channel on RHEL5 (tlestach@redhat.com)
  - 713548 - enable running rhn-channel against both RHN and RHN Satellite
    (tlestach@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.6.6-1
changelog:
  - 710065 - handle unicode log messages
  - 710065 - handle unicode error messages
  - merged duplicated code to NoLogError class
  - moved duplicated code to base Error class
  - 684250 - correct priority for initial registration screen


author: Jan Pazdziora 1.6.12-1
changelog:
  - 729161 - default to RHSM in firstboot registration (mzazrivec@redhat.com)
  - 729468 - firstboot dialogs polishing (mzazrivec@redhat.com)


author: Miroslav Suchý 1.6.25-1
changelog:
  - 743259 - RHEL5 now has python-ethtool 0.6 - simplify code
  - 743259 - get_ipv6_addresses does not return one item, but list
  - 745438 - up2date_config: use localhost to avoid confusion
    (mzazrivec@redhat.com)


author: Miroslav Suchý 1.6.26-1
changelog:
  - 627809 - send xen virtual block devices to rhnParent
  - Revert "729161 - default to RHSM in firstboot registration"
    (mzazrivec@redhat.com)


author: Miroslav Suchý 1.6.34-1
changelog:
  - call parent's constructor
  - 751760 - use attribute value, which our ancestor use
  - correctly assign converted unicode string
  - correctly check for unicode type


author: Miroslav Suchý 1.6.38-1
changelog:
  - define __init__, __getattribute__, __setattr__ on Debian and workaround those
    mising methods on RHEL5


author: Miroslav Suchý 1.6.39-1
changelog:
  - IPv6: first try findHostByRoute() and then try getaddrinfo()
  - IPv6: assign to hostname only if we are unable to resolve it
  - IPv6: IPv4 is most probably set up better, lets overwrite IPv6 values (if
    mismatch)
  - 743259 - take hostname of client instead of server


author: Miroslav Suchý 1.7.2-1
changelog:
  - 771167 - verify login/password just after user will file it in
  - do not print yum-rhn-plugin warning if zypp-plugin is used
  - removed dead remaining_subscriptions() (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.7.3-1
changelog:
  - 748876 - convert paths to absolute before saving
  - 748876 - simplify ConfigFile.save() loop
  - 751893 - fix typo


author: Miroslav Suchý 1.7.4-1
changelog:
  - 746983 - in spacewalk_channel print to STDERR only error message, TB + error
    goes to log file
  - 745095 - provide virtualization info when registering via rhn_register
    (tlestach@redhat.com)


author: Jan Pazdziora 1.7.13-1
changelog:
  - Update .po and .pot files for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Miroslav Suchý 1.8.1-1
changelog:
  - fix typo in man page
  - 772070 - classic hosted alignment is no longer needed (mzazrivec@redhat.com)
  - 772070 - firstboot gui re-design (mzazrivec@redhat.com)
  - 772070 - correct button text (mzazrivec@redhat.com)
  - 772070 - new title for "cannot contact server" dialog (mzazrivec@redhat.com)
  - 799926 - correct path to rhsm's certlib (mzazrivec@redhat.com)
  - Bumping package versions for 1.8. (jpazdziora@redhat.com)


author: Jan Pazdziora 1.8.2-1
changelog:
  - 804559 - not all msgs are CommunicationError objects (mzazrivec@redhat.com)
  - 804559 - correct string catenation (mzazrivec@redhat.com)


author: Miroslav Suchý 1.8.5-1
changelog:
  - fix files header, filese are not released under GPLv2+ but only GPLv2
  - fix files headers. our code is under gplv2 license
  - %defattr is not needed since rpm 4.4


author: Jan Pazdziora 1.8.21-1
changelog:
  - 823551 - fixing problem with firstboot
  - 823551 - gui and text changes for firstboot and rhn_register
  - 810389 - rhn_register / firstboot gui minor updates
  - 810315 - New "updates availabe" screenshot for firstboot
  - 851657 - polish registration strings
  - 855992 - make rhn-channel smart enough to use proxy if configured
  - 855883 - rhn_check: use gettext correctly when needed


author: Jan Pazdziora 1.8.25-1
changelog:
  - Update the copyright year.
  - Update .po and .pot files for rhn-client-tools.
  - New translations from Transifex for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Michael Calmer <mc@suse.de> 1.9.2-1
changelog:
  - check if system id has changed
  - check if /etc/sysconfig/network is a file
  - no hal for openSUSE >= 11.4


author: Jan Pazdziora 1.9.3-1
changelog:
  - 876740 - updating error message for rhn_register TUI if SSL cert missing
  - 876328 - updating rhel client tools translations
  - 823551 - Download icon in "Are you sure" screen of rhn_register is incorrect


author: Jan Pazdziora 1.9.5-1
changelog:
  - 876328 - Merging the new translation work form RHEL 6.4
  - Revert "876328 - updating rhel client tools translations"


author: Jan Pazdziora 1.9.7-1
changelog:
  - 885170 - provide translations of a new error recieved from Hosted
  - 882174 - read the hostname from /etc/hostname if needed


author: Milan Zazrivec <mzazrivec@redhat.com> 1.9.8-1
changelog:
  - fix reading cpuinfo on s390x
  - try to get the FQDN as hostname
  - Revert "Update rhn_check to send abrt data to the server"
  - Updating copyright for 2012
  - Update .po and .pot files for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Miroslav Suchý <msuchy@redhat.com> 1.10.1-1
changelog:
  - rpm macros must not be marked as config file
  - Bumping package versions for 1.9
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Stephen Herr <sherr@redhat.com> 1.10.7-1
changelog:
  - 948337 - Make client tools only pass up cpu_socket if server has capability
  - man pages branding cleanup + misc branding fixes


author: Tomas Kasparek <tkasparek@redhat.com> 1.10.8-1
changelog:
  - rebranding RHN Proxy to Red Hat Proxy in client stuff
  - rebranding RHN Satellite to Red Hat Satellite in client stuff


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-7
changelog:
  - Resolves: #1262780 - alow to use existing rpcServer when creating RhnServer
    (jdobes@redhat.com)
  - Resolves: #1292036 - don't mention Spacewalk in rhn-client-tools
    (tkasparek@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-9
changelog:
  - Resolves: #1371871 - fix UnicodeDecodeError when running rhnreg_ks with a
    different locale than en_US (galt@redhat.com)
  - fix except to be compatible with Python 2.4 (galt@redhat.com)
  - 1260527,1409570 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-11
changelog:
  - Resolves: #1444764 - sgmlop module might not be available on RHEL 7
    (tkasparek@redhat.com)
  - Resolves: #1439139 - fix import error (tkasparek@redhat.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-12
changelog:
  - Resolves: #1378903 - uptime report: respect xmlrpc's integer limits994531 -
    uptime report: respect xmlrpc's integer limits (mzazrivec@redhat.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-13
changelog:
  - Related: #1378903 - uptime report: respect xmlrpc's integer limits1378903 -
    uptime report: respect xmlrpc's integer limits (grinrag@gmail.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-14
changelog:
  - Related: #1378903 - fixed BZ ID in a changelog1378903 - fixed BZ ID in a
    changelog (grinrag@gmail.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-15
changelog:
  - Related: #1378903 - fix keywords in a changelog1378903 - fix keywords in a
    changelog (galt@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-16
changelog:
  - Resolves: #1415742 - rhn-search traceback - immediateTrigger-server exists
    with certain identification1415742 - rhn-search traceback - immediateTrigger-
    server exists with certain identification (eherget@redhat.com)


author: Tomas Lestach <tlestach@redhat.com> 2.0.2-17
changelog:
  - Reverts: bz 1415742 - rhn-search traceback - immediateTrigger-server exists
    with certain identification (michael.mraka@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-18
changelog:
  - Resolves: #1430298 - rhnreg_ks man page missing documentation for some
    options (ogajduse@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-19
changelog:
  - Related: #1494389 - detect if action has been picked up for 2nd time
    (tkasparek@redhat.com)
  - Resolves: #1494389 - revert previous reboot loop changes
    (tkasparek@redhat.com)


author: Georgy Lepsaya <glepsaya@cloudlinux.com> 2.0.2-54.cloudlinux
changelog:
  - CLOS-3961: Migrate CL7 to no-auth SWNG mirrors, obsolete yum-rhn-plugin
  - CLOS-4381: normal-to-hybrid: retry yum on transient failures and abort on persistent failure


author: Matej Kollar <mkollar@redhat.com> 5.10.80-1
changelog:
  - 1177656 - Fix directory creation
  - Getting rid of Tabs and trailing spaces in Python
  - Getting rid of Tabs and trailing spaces in LICENSE, COPYING, and README files


author: Stephen Herr <sherr@redhat.com> 2.5.56-1
changelog:
  - 947639 - make Proxy timeouts configurable
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Gennadii Altukhov <galt@redhat.com> 2.5.65-2
changelog:
  - fix except in rhnlib to make it compatible with Python 2.4 (galt@redhat.com)
  - 1409577 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.5.65-5
changelog:
  - Resolves: #1471045 - check a state of handshake before shutdown SSL
    connection (grinrag@gmail.com)


author: Milan Zazrivec <mzazrivec@redhat.com> 5.0.9-1
changelog:
  - Update .po and .pot files for rhnsd.
  - New translations from Transifex for rhnsd.
  - Download translations from Transifex for rhnsd.


author: Michael Mraka <michael.mraka@redhat.com> 5.0.10-1
changelog:
  - let rhnsd.service be enabled after installation
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Grant Gainey 5.0.13-5
changelog:
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
  - Revert changes in order to clean up tagging issues with brew
    (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
    (ggainey@redhat.com)
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
    (ggainey@redhat.com)
  - Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 5.0.13-6
changelog:
  - 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
  - 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-8
changelog:
  - Resolves: #1480306 - change permissions for rhnsd.pid (grinrag@gmail.com)
  - Resolves: #1489989 - umask(0) does not reset to default umask
    (tkasparek@redhat.com)
  - Resolves: #1475039 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-9
changelog:
  - Related: #1499793 - revert previous reboot loop changes
    (tkasparek@redhat.com)
  - Resolves: #1499793 - Revert "1260527 RHEL7 rhnsd reload doesn't work"
    (tkasparek@redhat.com)


author: Michael Calmer <mc@suse.de> 5.0.5-1
changelog:
  - use systemd on openSUSE >= 12.1
  - do not start rhnsd in runlevel 2 which has no network
  - no use of /var/lock/subsys/ anymore


author: Jan Pazdziora 5.0.7-1
changelog:
  - Only run chkconfig if we are in the SysV world.
  - rhnsd needs to be marked as forking.
  - When talking to systemctl, we need to say .service.


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-7.2
changelog:
  - Resolves: #1506911 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.1-10
changelog:
  - do not crash during extracting if extended attributes are not set on all
    archived files (#861848)
  - note in man page that H=crc format uses Sum32 algorithm (FIPS refuses CRC)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-2
changelog:
  - Add dist tag, fix a few rpmlint issues, rebuild due to
    wrong vendor (#451229)
  - Added ncurses requirement(#469390)


author: Phil Knirsch <pknirsch@redhat.com> - 8.1-4
changelog:
  - Added the "we-are-upstream" comments according to Fedora review (#226376)
  - Added -p option to install to preserve timestamps (#226376)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-5
changelog:
  - removed clear from dot-bash_logout (synchronized with bash,
    related to #429406)
  - removed unset USERNAME from dot-bash_profile (synchronized with
    bash, related to #196735)


author: Than Ngo <than@redhat.com> - 3.11-1
changelog:
  - 3.11
  - bz#540763, add IP allocation by pppd ability to pppoe-server
  - bz#808676, add missing % symbol for triggerun


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: Steve Dickson <steved@redhat.com> - 0.2.0-39
changelog:
  - Added libtirpc dependency (bz 1396291)
  - Removed xlog warning (bz 1377531)
  - Removed an 'i' warning (bz 1377560)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.3-31
changelog:
  - Backport missing infra for --noconfig option (#1406611)
  - As a side-effect, this also makes --noghost work as intended


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-33
changelog:
  - Repair of --noghost option implementation (#1395818)
  - Backport fix rpmSign() return value in case of failure (#1419590)
  - Backport passing _find_debuginfo_opts -g to eu-strip for executables
    (#1540653)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-34
changelog:
  - Adjust --noghost documentation (#1395818)
  - Provide audit events on update verification (#1555326)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-36
changelog:
  - Add popt-based options --setcaps and --restore (#1550745)
  - Improve hardlink handling in disk space calculation (#1491786)
  - Remove perl dependencies that are provided in the same file (#1570181)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-8
changelog:
  - Fix segfault on empty -p <lua> scriptlet body (#1004062)
  - Add missing dependency on tar to rpm-build (#986539)


author: Florian Festi <ffesti@redhat.com> - 4.11.1-9
changelog:
  - Fix byteorder for 64 bit tags on big endian machines (#1012946)
   - Better RPMSIGTAG_SIZE vs PMSIGTAG_LONGSIZE detection (#1012595)


author: Florian Festi <ffesti@redhat.com> - 4.11.1-17
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (#1163060)
  - Fixes CVE-2013-6435


author: Tom Callaway <spot@fedoraproject.org> - 1.4-10
changelog:
  - fix handling of ruby RI files as text files (they are binary files)
  - apply upstream fix for macro regexp


author: Thomas Woerner <twoerner@redhat.com> - 1.5-4
changelog:
  - enable bash-completion again, fixes (RHBZ#495529)
  - fixed rpmlint reports missing-lsb-keyword Default-Stop (rhbz#976341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.8-1
changelog:
  - New version
    Resolves: rhbz#966639
  - Updated and defuzzified patches
  - Still use lua-5.1 (fedoras < f20)


author: Michal Sekletar <msekleta@redhat.com> - 0.17-71
changelog:
  - resolves: RHBZ #737244 #896583 #947213
  - migrate from xinetd to systemd configuration
  - close pam session correctly when client does not ask for separate error channel
  - fix pty handling which was broken by changes in /bin/login


author: Michal Sekletar <msekleta@redhat.com> - 0.17-72
changelog:
  - unit files must not be marked as config files
  - fix handling of non-native IPv6 connections via AF_INET6 socket


author: Michal Ruprich <mruprich@redhat.com> - 0.17-78
changelog:
  - Resolves: #1502657 - Copying remote file to local dir fails with "rcp: protocol screwup: expected control record"
  - Resolves: #1338037 - rsh/rlogin sessions ignore SIGPIPE due to systemd
  - Resolves: #1477207 - rlogin killed when changing run level
  - Resolves: #1503112 - rexecd Could not allocate space for cmdbuf
  - Resolves: #1505226 - have a proposed patch for rsh-0.17-76.el7_1.1


author: Pavel Šimerda <psimerda@redhat.com> - 3.0.9-14
changelog:
  - Resolves: #1052814 - rsync command is terminated with SIGSEGV
  - Resolves: #1052814 - add missing patch file


author: Luboš Uhliarik <luhliari@redhat.com> - 3.0.9-17
changelog:
  - Resolves: #1082496 - socket activation for rsync doesn't work (added missing
    rsyncd@.service file)


author: Michal Ruprich - 3.1.2-4
changelog:
  - Related: #1432899 - removing dependencies on perl
  - using the bundled zlib.h(#1491582)
  - turning on upstream tests


author: Michal Ruprich <mruprich@redhat.com> - 3.1.2-10
changelog:
  - Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 3.1.2-12.tuxcare.els1
changelog:
  - CVE-2018-25032: fix a bug that can crash deflate on some input when using
    Z_FIXED
  - CVE-2022-37434: fix zlib bug with a large gzip header extra field


author: Jai S <jsathyapalan@cloudlinux.com> - 3.1.2-12.tuxcare.els3
changelog:
  - CVE-2024-12087: fix path traversal vulnerability in rsync enabled by the '--inc-recursive' option
  - CVE-2024-12088: make --safe-links stricter


author: Rustam Mustafin <rmustafin@cloudlinux.com> - 3.1.2-12.0.1.tuxcare.els3
changelog:
  - CVE-2024-12086: prevent server from reading arbitrary client files via
    path traversal
  - CVE-2025-10158: fix invalid access to files array in sender
  - Add upstream stability fix (RsyncProject/rsync PR #706):
    use-after-free in generator
  - Enable Amazon Linux 2 ELS


author: Rustam Mustafin <rmustafin@cloudlinux.com> - 3.1.2-12.0.1.tuxcare.els4
changelog:
  - CVE-2017-16548: enforce trailing NUL on received xattr names in
    receive_xattr()
  - CVE-2017-17434: sanitize xname strings in read_ndx_and_attrs() and
    check fnamecmp against the daemon filter list


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 3.1.2-12.0.1.tuxcare.els5
changelog:
  - CVE-2018-5764: prevent client from resetting protect_args during the
    second parse_arguments pass on the daemon


author: Bartosz Staszewski <bstaszewski@cloudlinux.com> - 3.1.2-12.0.1.tuxcare.els6
changelog:
  - CVE-2026-43618: fix integer overflow in compressed-token decoder
    allowing remote memory disclosure via crafted compressed stream


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-37
changelog:
  RHEL 7.7 ERRATUM
  - edited patch fixing mmkubernetes halt after pod deletition
    (covscan found an issue in previous version)
    resolves: rhbz#1622767
  - added patch stopping flooding logs with journald errors
    resolves: rhbz#1632211
  - added patch stopping flooding logs with symlink false-positives
    resolves: rhbz#1685901
  - added patch stopping memory leak when processing internal msgs
    resolves: rhbz#1666365
  - added documentation patch with info about CRI-O to mmkubernetes
    resolves: rhbz#1625935


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-38
changelog:
  RHEL 7.7 ERRATUM
  - added patch increasing max path size preventing buffer overflow
    with too long paths
    resolves: rhbz#1656860


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch with new "fsync" imjournal option
    resolves: rhbz#1696686
  - added patch resolving omelasticsearch crash on "nothing" reply
    resolves: rhbz#1684236


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch for new caseSensitive imUDP/TCP option
    resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
  RHEL 7.8 ERRATUM
  - Support Intermediate Certificate Chains in rsyslog
    resolves: rhbz#1627799
  - fixed WorAroundJournalBug patch to not cause leaks
    resolves: rhbz#1744617
  - added patch fixing possible segfault in rate-limiter
    resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
  RHEL 7.8 ERRATUM
  - edited imfile truncation detection patch with reression fix
    resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
  RHEL 7.8 ERRATUM
  - added patch resolving crash on wrong MsgProperty
    resolves: rhbz#1549706
  - added patch resolving CVE in pmaixforward module
    resolves: rhbz#1768320
  - added patch resolving CVE in pmcisconames module
    resolves: rhbz#1768323
  - added patch implementing file ID for imfile
    resolves: rhbz#1763746
  - added patch fixing omelasticsearch with ES 6.X
    resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
  RHEL 7.8 ERRATUM
  - fixed fsync patch to actually revognize the new option
    resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
  RHEL 7.8 ERRATUM
  - edited patch file ID for imfile to not log useless errors
    also improved file-id behavior to adress newly found problems
    resolves: rhbz#1763746


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-53
changelog:
  RHEL 7.9 ERRATUM
  - one more fix for file ID patch to extend to offline behavior
    resolves: rhbz#1806493
  - added patch resoving race in serialization resulting in crash
    resolves: rhbz#1778841


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-55
changelog:
  RHEL 7.9 ERRATUM
  - edited imfile file-id patch to not segfault on selinux block
    resolves: rhbz#1843992


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-57
changelog:
  RHEL 7.9 ERRATUM
  - added patch resolving buffer overflows in select() function
    resolves: rhbz#1858297


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-3
changelog:
  - replace rsyslog-7.3.15-imuxsock-warning.patch
    with rsyslog-7.4.7-bz1053669-imuxsock-wrn.patch
    resolves: #1053669
  - add rsyslog-7.4.7-bz1052266-dont-link-libee.patch to prevent
    linking the main binary with libee
    resolves: #1052266
  - add rsyslog-7.4.7-bz1054171-omjournal-warning.patch to fix
    a condition for issuing a warning in omjournal
    resolves: #1054171
  - drop the "v5" string from the conf file as it's misleading
    resolves: #1040036


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-5
changelog:
  - move the rscryutil man page to the crypto subpackage
    resolves: #1056565
  - add a patch to prevent message loss in imjournal
    rsyslog-7.4.7-bz1038136-imjournal-message-loss.patch
    resolves: #1038136


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-6
changelog:
  - disable the imklog plugin by default
    the patch for rhbz#1038136 caused duplication of kernel messages since the
    messages read by the imklog plugin were now also pulled in from journald
    resolves: #1078654


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-8
changelog:
  - modify the service file to automatically restart rsyslog on failure
    resolves: rhbz#1061322
  - add explicitly versioned dependencies on libraries which do not have
    correctly versioned sonames
    resolves: rhbz#1107839
  - make logrotate tolerate missing log files
    resolves: rhbz#1144465
  - backport the mmcount plugin
    resolves: rhbz#1151037
  - set the default service umask to 0066
    resolves: rhbz#1228192
  - add a patch to make imjournal sanitize messages as imuxsock does it
    resolves: rhbz#743890
  - add a patch to fix a bug preventing certain imuxsock directives from
    taking effect
    resolves: rhbz#1184410
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202489


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-9
changelog:
  - update the patch fixing a race condition in directory creation
    resolves: rhbz#1202489
  - improve provided documentation
    - move documentation from all subpackages under a single directory
    - add missing images
    - remove doc files without content
    - add a patch making various corrections to the HTML documentation
    resolves: rhbz#1238713
  - add a patch to prevent division-by-zero errors
    resolves: rhbz#1078878
  - add a patch to clarify usage of the SysSock.Use option
    resolves: rhbz#1143846
  - add a patch to support arbitrary number of listeners in imuxsock
    - drop patch for rhbz#1053669 as it has been merged into this one
    resolves: rhbz#1151041


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-10
changelog:
  - add a patch to prevent field truncation in imjournal
    resolves: rhbz#1101602
  - add a patch to enable setting a default TAG
    resolves: rhbz#1188503
  - add a patch to fix a nonfunction hostname setting in imuxsock
    resolves: rhbz#1184402


author: Radovan Sroka <rsroka@redhat.com> 7.4.7-11
changelog:
  - add patch that resolves config.guess system-recognition on ppc64le architecture
    resolves: rhbz:1254511


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-13
changelog:
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224336
  - add a patch to keep the imjournal state file updated
    resolves: rhbz#1216957
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1214257
  - add a patch to prevent crashes when using rulesets with a parser
    resolves: rhbz#1282687


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-14
changelog:
  - add a patch to prevent loss of partial messages
    resolves: rhbz#1312459
  - add a patch to allow multiple rulesets in imrelp
    resolves: rhbz#1223566
  - add a patch to fix a race condition during shutdown
    resolves: rhbz#1295798
  - add a patch to backport the mmutf8fix plugin
    resolves: rhbz#1146237
  - add a patch to order service startup after the network
    resolves: rhbz#1263853


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-15
changelog:
  - add a patch to make state file handling in imjournal more robust
    resolves: rhbz#1245194
  - add a patch to support wildcards in imfile
    resolves: rhbz#1303617


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-1
changelog:
  - rebase to 7.4.7
    add requirement on libestr >= 0.1.9
    resolves: #836485
    resolves: #1020854
    resolves: #1040036
  - drop patch 4; not needed anymore
    rsyslog-7.4.2-imuxsock-rfc3339.patch
  - install the rsyslog-recover-qi.pl tool
  - fix a typo in a package description
  - add missing defattr directives
  - add a patch to remove references to Google ads in the html docs
    rsyslog-7.4.7-bz1030044-remove-ads.patch
    Resolves: #1030043
  - add a patch to allow numeric specification of UIDs/GUIDs
    rsyslog-7.4.7-numeric-uid.patch
    resolves: #1032198
  - change the installation prefix to "/usr"
    resolves: #1032223
  - fix a bad date in the changelog
    resolves: #1043622
  - resolve a build issue with missing mysql_config by adding
    additional BuildRequires for the mysql package
  - add a patch to resolve build issue on ppc
    rsyslog-7.4.7-omelasticsearch-atomic-inst.patch


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-6
changelog:
  - RHEL 7.4 ERRATUM
  - rsyslog rebase to 8.24
  - added patch to prevent segfault while setting aclResolveHostname
    config options
    resolves: rhbz#1422414
  - added patch to check config variable names at startup
    resolves: rhbz#1427828
  - added patch for str2num to handle empty strings
    resolves: rhbz#1427821
  - fixed typo in added-chdir patch
    resolves: rhbz#1422789
  - added patch to log source process when beginning rate-limiting
    resolves: rhbz#1196230
  - added patch to chdir after chroot
    resolves: rhbz#1422789
  - added patch to remove "inputname" imudp module parameter 
    deprecation warnings
    resolves: rhbz#1403907
  - added patch which resolves situation when time goes backwards
    and statefile is invalid
    resolves rhbz#1088021
  - added a patch to bring back deprecated cmd-line switches and
    remove associated warnings
    resolves: rhbz#1403831
  - added documentation recover_qi.pl
    resolves: rhbz#1286707
  - add another setup for doc package
  - add --enable-generate-man-pages to configure parameters;
    the rscryutil man page isn't generated without it
    https://github.com/rsyslog/rsyslog/pull/469
  - enable mmcount, mmexternal modules
  - remove omruleset and pmrfc3164sd modules


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-8
changelog:
  RHEL 7.4 ERRATUM
  - added dependency automake autoconf libtool due to yum-builddep
  - reenable omruleset module
    resolves: rhbz#1431615
    resolves: rhbz#1428403
    resolves: rhbz#1427821(fix regression, failed QA)
    resolves: rhbz#1432069
  - resolves: rhbz#1165236
    resolves: rhbz#1419228
    resolves: rhbz#1431616 
    resolves: rhbz#1196230(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-9
changelog:
  RHEL 7.4 ERRATUM
  - added autoreconf call
  - added patch to replace gethostbyname with getaddrinfo call
    resolves: rhbz#1056548(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-10
changelog:
  RHEL 7.4 ERRATUM
  - edited patches Patch19 and Patch21
    resolves: rhbz#1419228(coverity scan problems)
    resolves: rhbz#1056548(failed QA, coverity scan problems)


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-11
changelog:
  RHEL 7.4 ERRATUM
  - added new patch that backports num2ipv4 due to rhbz#1427821
    resolves: rhbz#1427821
  - enable pmrfc3164sd module
    resolves: rhbz#1431616


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-23
changelog:
  - Add missing patch for new tzdata
    Related: rhbz#1144023
  - Add missing patch for RFC 5649 in OpenSSL
    Related: rhbz#1145692


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.598-24
changelog:
  - Rebased to Ruby 2.0.0-p598.
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
        -succ.patch; subsumed
    * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
    Resolves: rhbz#1071187
  - Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
    Resolves: rhbz#1164000
  - Fix for Proxy Realm feature.
    Resolves: rhbz#1122140
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164000


author: Pavel Valena <pvalena@redhat.com> - 2.0.0.648-26
changelog:
  - Rebase to Ruby 2.0.0-p648
    Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
        with-DESTDIR.patch; subsumed
    * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
    * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
        fails.patch; subsumed
  - Remove tests depending on europe/moscow to avoid failures due to tzdata change
    https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
  - Add checks for systemtap, abrt hook and rubygems version
  - Fix significant hash table performance slowdown on ppc64le
    Resolves: rhbz#1163032
  - Support in no_proxy for domain names with whitespaces and leading dots
    Resolves: rhbz#1300433


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-35
changelog:
  - Introduce `Gem::UserInteraction#verbose` method as precondition to fix
    CVE-2019-8321.
    * rubygems-2.3.0-refactor-checking-really_verbose.patch
  - Fix escape sequence injection vulnerability in verbose.
  - Fix escape sequence injection vulnerability in gem owner.
  - Fix escape sequence injection vulnerability in API response handling.
  - Prohibit arbitrary code execution when installing a malicious gem.
  - Fix escape sequence injection vulnerability in errors.
    * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
    Resolves: rhbz#1699283


author: Jun Aruga <jaruga@redhat.com> - 2.0.0.648-35
changelog:
  - Kill bundled certificates.
  - Add macros to edit files lists in .gemspec
  - Fix buffer under-read in String#unpack
    Resolves: CVE-2018-8778
  - Fix HTTP response splitting in WEBrick
    Resolves: CVE-2017-17742
  - Fix DoS by large request in WEBrick
    Resolves: CVE-2018-8777
  - Fix directory traversal by poisoned NULL byte in Dir.
    Resolves: CVE-2018-8780
  - Fix file and directory creation with directory traversal.
    Resolves: CVE-2018-6914
  - Fix socket creation by poisoned NULL byte.
    Resolves: CVE-2018-8779
  - Fix: return default path with nonexistent home dir
  - Fix flags not propagated in Array#pack and String#unpack.
    Resolves: CVE-2018-16396
  - Fix strictly interpret octal fields in tar headers.
    Resolves: CVE-2018-1000075
  - Fix a security error for duplicate files in a package.
    Resolves: CVE-2018-1000076
  - Enforce URL validation on spec homepage attribute.
    Resolves: CVE-2018-1000077
  - Mitigate XSS vulnerability in homepage attribute.
    Resolves: CVE-2018-1000078
  - Prevent Path Traversal issue during gem installation.
    Resolves: CVE-2018-1000079
  - Fix unsafe Object Deserialization Vulnerability in gem owner.
    Resolves: CVE-2018-1000074
  - Refresh expired certificates.
  - Fix path traversal when writing to a symlinked basedir outside of the root
    Resolves: CVE-2018-1000073


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-36
changelog:
  - Introduce `Gem::UserInteraction#verbose` method as precondition to fix
    CVE-2019-8321.
    * rubygems-2.3.0-refactor-checking-really_verbose.patch
  - Fix escape sequence injection vulnerability in verbose.
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325
    * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch


author: <vondruch@redhat.com> - 1.7.8-2
changelog:
  - Update to Bundler 1.7.8.
    Resolves: rhbz#1194243
  - Use symlinks for vendored libraries.
    Resolves: rhbz#1163076


author: Vít Ondruch <vondruch@redhat.com> - 0.16.0-1
changelog:
  - Update to thor 0.16.0.
  - Remove rubygem(diff-lcs) dependency, since it is just optional.
  - Remove rubygem(ruby2ruby) dependnecy, since it is just optional, to allow
    conversion of Rakefiles to Thorfiles (but it doesnt work withou ParseTree anyway).


author: Honza Horak <hhorak@redhat.com> - 0.17-70
changelog:
  - Minor spec file changes
  - Use new systemd macros (Resolves: #850302)
  - Use systemd notify messages


author: Honza Horak <hhorak@redhat.com> - 0.17-77
changelog:
  - Free already alocated memory when parsing of RPC request failed
  - Require systemd instead of systemd-units
  - Remove SysV init converting


author: Petr Kubat <pkubat@redhat.com> - 0.17-81
changelog:
  - Remove execute permissions from *.service files (#1422022)
  - Fix wrong Source url (#1418690)
  - Add BSD license text (#1418686)


author: - Alexander Bokovoy <abokovoy@redhat.com> - 4.1.1-30
changelog:
  - resolves: #1083859  - Force KRB5CCNAME in Samba systemd units.
  - related: #1082598 - Fully enables systemd integration.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.1-35
changelog:
  - resolves: #1105504 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108844 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105573 - CVE-2014-0178: Uninitialized memory exposure.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-2
changelog:
  - resolves: #1138554 - Fix consuming a lot of CPU when re-reading printcap info.
  - resolves: #1134323 - Fix running Samba on little endian Power8 (ppc64le).
  - resolves: #1113064 - Fix case sensitivity options with SMB2 protocols.
  - resolves: #1088924 - Fix applying ACL masks when setting ACLs.
  - resolves: #1135723 - Fix 'force user' regression.
  - resolves: #1117770 - Fix empty full_name field with samlogon.
  - resolves: #1101210 - Fix telling systemd that nmbd is waiting for interfaces.
  - resolves: #1127931 - Fix getgroups() with idmap_ad returning non-mapped groups.
  - resolves: #1144963 - Fix idmap_ad with SFU against trusted domains.
  - resolves: #1140568 - Fix a segfault in the smbclient echo command.
  - resolves: #1089940 - Improve service principal guessing in 'net ads'.
  - resolves: #955561 - Fix overwriting of SPNs in AD during 'net ads join'.
  - resolves: #955562 - Add precreated SPNS from AD during keytab initialization.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.12-3
changelog:
  - resolves: #878351 - Fix usage of AES keys by default.
  - resolves: #861366 - Fix KRB5 locator to use same KDC for joining and DNS update.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-9
changelog:
  - resolves: #1162552 - Fix net ads join segfault on big endian systems.
  - resolves: #1164203 - Fix net ads join segfault with existing keytab.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-11
changelog:
  - resolves: #1163748 - Fix smbclient -L fails against new Windows versions
                         over TCP.
  - resolves: #1167849 - Fix smbstatus --profile always returning EXIT_FAILURE.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-13
changelog:
  - resolves: #1172089 - Fix 'net rpc join' with schannel changes.
  - resolves: #1170883 - Fix 'net time system' segfault.


author: Andreas Schneider <asn@redhat.com> - 4.1.12-18
changelog:
  - resolves: #1179787 - Fix authentication against Kerberos domains.
  - resolves: #1181319 - Package pam_smbpass again.
  - resolves: #1184023 - Fix authentication with long 'netbios_name' set.
  - resolves: #1183546 - Fix 'net time' segfault.


author: Nils Philippsen <nils@redhat.com> - 1.0.24-1
changelog:
  - version 1.0.24
  - use (hopefully stable) Alioth download URL
  - update udev patch, remove obsolete patches
  - use udev hwdb instead of huge rulesets


author: Nils Philippsen <nils@redhat.com> - 1.0.23-18
changelog:
  - build against libusb-1.0 on Fedora >= 18 (#1003193)
  - require libusbx-devel instead of libusb1-devel which is obsolete


author: Nils Philippsen <nils@redhat.com> - 1.0.14-10
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: Nils Philippsen <nils@redhat.com> - 1.0.14-14
changelog:
  - clean up:
    - don't BR: gimp-devel, R: sane-backends
    - get rid of buildroot, %makeinstall and %clean section
    - dont obsolete/provide "sane" (ancient)


author: Martin Milata <mmilata@redhat.com> 0.13-2
changelog:
  - Use elfutils unwinder
    - Resolves: #1051569
  - Disable function fingerprinting
    - Resolves: #1052402


author: Martin Milata <mmilata@redhat.com> - 0.13-5
changelog:
  - Fix minor bugs found by static analyzers
    - Resolves: #1142856
  - Return empty duphash for koopses with no reliable frames
    - Resolves: #1123262
  - Fix parsing of python SyntaxError exceptions
    - Resolves: #1142339
  - Fix parsing of ppc64 gdb stacktraces
    - Resolves: #1142338
  - Limit the depth of generated stacktrace to avoid huge reports
    - Resolves: #1142346
  - Add authentication support to uReport, needed for reporting to customer portal
    - Resolves: #1139555


author: Matej Habrnal <mhabrnal@redhat.com> - 0.13-13
changelog:
  - add support for Ruby
    - Related: #1334604
  - actualize list of normalization function in satyr
    - Related: #1332869
  - fix defects found by coverity
    - Related: #1336390


author: Jakub Filak <jfilak@redhat.com> 0.9-1
changelog:
  - New upstream version
    - Enrich koops uReport data with koops text and kernel version.
    - Improve koops modules handling.


author: Martin Milata <mmilata@redhat.com> 0.9-2
changelog:
  - Fix malformed JSON for some Java and koops reports
    - Resolves: #1035317
    - Resolves: #1036790
  - Fix memory leak in RPM handling
    - Resolves: #1016780
  - Check for unsigned overflows
    - Resolves: #1034869


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-11
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921487


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.0-5
changelog:
  - Add support for arbitrary names of network devices in Linux_NetworkPortImplementsIPEndpoint
    association
    Resolves: #682386
  - Remove macros from changelog, register to sfcb


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.2.0-3
changelog:
  - Fix provider segfaults when enumerating instances of Linux_SysfsAttribute class
  - Fix provider doesn't show much sysfs entries
  - Add mofs registration for various CIMOMs


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.8.0-4.20120315cvs
changelog:
  - Use latest upstream CVS (because of rsyslog support)
  - Build against sblim-cmpi-devel and instead of tog-pegasus-devel
  - Fix rsyslog support to work with systemd


author: Tomas Bzatek <tbzatek@redhat.com> - 0.8.0-10.20120315cvs
changelog:
  - Add support for rsyslog $IncludeConfig directive (#971807)
  - Add support for filter definitions (#971807)
  - Various rsyslog compatibility fixes (#971807)


author: Roman Rakus <rrakus@redhat.com> - 2.2.7-3
changelog:
  - Fixed a typo
  - Added missing providers
  - improved providers registration
  - Fixed owning of filesystem's directories (man)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-7
changelog:
  - Fix sblim-gather is installing files under /etc/tmpfiles.d/
    Resolves: #1180992
  - Build with PIE and full RELRO
    Resolves: #1092566


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-8
changelog:
  - Fix reposd crashes with SIGFPE during calcluation of interval metric when there
    are duplicate data values in the repository
    Resolves: #1467038


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use Pegasus root/interop instead of root/PG_Interop
  - Enable System Z specific providers for s390 and s390x architecture
    Resolves: #1545811


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-3
changelog:
  - Fix indCIMXmlHandler crash in IndCIMXMLHandlerInvokeMethod with Embedded Instances 
    Resolves: #957747
  - Fix sfcb creates invalid XML with embedded object inside embedded object
    Resolves: #957742


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-11
changelog:
  - Fix connection fails to openwsman with sfcbLocal frontend
    Resolves: #1047781
  - Fix multilib issue with man page and config file
    Resolves: #1067842


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.5-6
changelog:
  - Move libcimcClientXML.so from -devel to main package - it's needed for proper function
    Resolves: #1056407


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-10
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239115


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-11
changelog:
  - Update default CA certificate file path due to recent changes in tog-pegasus
    Resolves: #1320077
  - Fix wbemcli dont accept dot (.) as password character on command line
    Resolves: #1103368
  - Fix bogus date in %changelog


author: Watson Sato <wsato@redhat.com> - 0.1.49-7
changelog:
  - Bug fixes on CIS profile (RHBZ#1821633)
    Added Ansible remediations
    Fixed CIS references
    Fixed integration issues with CIS profile


author: Watson Sato <wsato@redhat.com> - 0.1.49-9
changelog:
  - CIS Profile fixes (RHBZ#1821633)
    - Fix Ansible mount_option template
    - Add Ansible for ensure_logrotate_activated
    - Add warnings to rpm_verify_permissions and ownership about findindings that may need further inspection


author: Watson Sato <wsato@redhat.com> - 0.1.49-10
changelog:
  - CIS Profile fixes (RHBZ#1821633)
    - Fix Ansible mount_option template
    - Re-order rpm_verify_permissions to avoid file permission conflicts


author: Watson Sato <wsato@redhat.com> - 0.1.49-11
changelog:
  - HIPAA Profile improvement (RHBZ#1513087)
    - Add Ansible remediation for audit_rules_system_shutdown


author: Watson Sato <wsato@redhat.com> - 0.1.49-12
changelog:
  - CIS Profile (RHBZ#1821633)
    - Make sure boot target is multi-user.target when xorg package is removed
    - Add CIS Profile content attribution to Center for Internet Security


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.52-1
changelog:
  - Update to the latest upstream release (RHBZ#1665233)
  - Update RHEL7 DISA STIG to V2R8 (RHBZ#1665233)


author: Watson Sato <wsato@redhat.com> - 0.1.54-1
changelog:
  - Rebase to incorporate ANSSI Profile (RHBZ#1497415)
  - Update RHEL7 STIG profile to V3R2 (RHBZ#1921643)
  - Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1497415)


author: Watson Sato <wsato@redhat.com> - 0.1.54-2
changelog:
  - Remove Kickstart for not shipped profile (RHBZ#1497415)
  - Fix STIG id reference format for sshd_x11_use_localhost (RHBZ#1921643)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.54-5
changelog:
  - Create subpackage to hold ansible playbooks per rule (RHBZ#1966589)
  - Fix Bash remediation of dconf_gnome_login_retries (RHBZ#1967566)


author: Jan Černý <jcerny@redhat.com> - 0.1.57-1
changelog:
  - Rebase to the 0.1.57 upstream release
  - Update RHEL7 DISA STIG profile to v3r4 (RHBZ#1996678)
  - Split CIS profile (RHBZ#1953787)


author: Watson Sato <wsato@redhat.com> - 0.1.57-7
changelog:
  - Add warning how to override audit buffer (RHBZ#1993822)
  - Fix name of antivirus package in STIG profile (RHBZ#2066321)
  - Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)


author: Watson Sato <wsato@redhat.com> - 0.1.63-1
changelog:
  - Update to the latest upstream release (RHBZ#2116359)
  - Fix SSH Key permissions (RHBZ#2021258)
  - Remove PCI-DSS Benchmark(RHBZ2038165)
  - Updated source of CVE data feed(RHBZ#2028432)
  - Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
  - Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
  - Add warning how to override audit buffer (RHBZ#1993822)
  - Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
  - Fix check of enable_fips_mode on s390x (RHBZ#2116359)
  - Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158410)
  - Update RHEL7 STIG profile to V3R10 (RHBZ#2152657)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2123284)
  - Fix remediation of audit watch rules (RHBZ#2123367)
  - Fix check firewalld_sshd_port_enabled (RHBZ#2158410)
  - Fix accepted control flags for pam_pwhistory (RHBZ#2158410)
  - Unselect rule logind_session_timeout (RHBZ#2158410)
  - Add support rainer scripts in rsyslog rules (RHBZ#2170038)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to the latest upstream release (RHBZ#2221694)
  - Make IPv6 related rules applicable only in case IPv6 is actually enabled. (RHBZ#2210276)
  - update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155793)
  - Correct URL used to download CVE checks. (RHBZ#2223817)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.72-1
changelog:
  - Rebase to a new upstream release 0.1.72 (RHEL-25251)
  - Include filter to dracut files in audit_rules_privileged_commands rule (RHEL-11938)


author: Martin Preisler <mpreisle@redhat.com> 0.8.2-1
changelog:
  - Updated to new version
  - Added a workaround to the cmake invocation because of faulty openscap .pc file


author: Martin Preisler <mpreisle@redhat.com> 0.8.6-1
changelog:
  - Upgrade to upstream 0.8.6 version:
    https://fedorahosted.org/scap-workbench/query?milestone=0.8.6&status=closed
  - Require polkit


author: Martin Preisler <mpreisle@redhat.com> 1.1.1-1
changelog:
  - Require English fonts (bz#1134418)
  - Updated with latest upstream URLs
  - Reorganized the spec a little
  - Removed SCL related parts from the spec
  - Updated to new upstream release 1.1.1


author: Watson Sato <wsato@redhat.com> 1.1.4-1
changelog:
  - Updated to new upstream release 1.1.4 (rhbz#1404394)
  - UX improvements
  - Fixed fetch remote resources warning (rhbz#1367923)
  - Improved error message when scanning a remote machine in which openscap-scanner
    is not installed (rhbz#1368463)
  - Fixed search on disabled item (rhbz#1368493)
  - Fixed multi benchmark tailoring use case
  - Fixed a bug that caused tailored profiles to have titles duplicated (rhbz#1320197)
  - Fixed path of tailoring file in dry run output (rhbz#1368516)
  - Now Workbench doesn't allow edit of values with prohibitedChanges attribute
  - Added --version and --help command line options (rhbz#1368527)
  - Improved workflow of dry run execution (rhbz#1385549)
  - Check capabilities of oscap with propper arguments (rhbz#1368463)
  - Show number of selected rules in profile listing


author: Martin Preisler <mpreisle@redhat.com> 1.1.6-1
changelog:
  - Updated to new upstream release 1.1.6
  - Tri-state checkboxes for tailoring
  - Fixed remote host and port being cleared when scan starts
  - Fiixed formating of Profile html description in Tailoring Window
  - Fixed oscap message "Downloading ... ok" appearing as an error
  - Fixed tab order of widgets in main window
  - Load Content as the default button of the SSG integration dialog
  - New validation of the customization file name
  - Generate bash and Ansible remediation roles from profiles
  - Generate bash and Ansible remediation roles from results after scanning
  - Fixed a short integer overflow when using ssh port numbers higher than 32k
  - Fixed long loading times on OSX
  - Open tailoring file directly via command line


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Lubos Kardos <lkardos@redhat.com - 20130529-8
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Lubos Kardos <lkardos@redhat.com> - 20130529-10
changelog:
  - Allow to use vendor prefix in packages names
  - Include %nfsmountable macro into scl's rpm macros file


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
  - bump the version to get in sync with 7.1 branch
  - Reflect the state of %nfsmountable macro in collections' rpm macro files
  - escape all the % chars in changelog


author: Jindrich Novy <jnovy@redhat.com> 20121110-1
changelog:
  - introduce sclbuild utility
  - fix exporting of env. variables when mutiple collections are
    enabled at the same time
  - better bash completion
  - fix changelog


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-2
changelog:
  - add scl_source script for intercollection dependencies (#1032444)
  - updated macros in macros.scl-filesystem (#1032451, #1032451)
  - add delimiter between collections and command (#1032460)
  - fix the name of attr macros (#1023628)


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-4
changelog:
  - fixed some coverity-reported bugs (related: #1032616)
  - a note about env. variables in man page (#968954)
  - drop the /var/spool/uucp from the default fs structure (#1033674)


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-6
changelog:
  Catch up with Fedora and RHEL6
  - add automatic Provides: scl-package(%scl) to all scl packages
    (except for metapackages)
  - add automatic Requires: %scl_runtime to all scl packages
    (except for metapackages)
  - the "filesystem" file renamed back to "filelist"
  - add correct dependencies to debug packages.
  - allow disabling debuginfo generation
  - remove automatic creation of debuginfo for metapackage.
  - rephrase command description in man page
  - fix system paths in __os_install_post
  - remove the sclbuild utility, as it's mostly useless
  - add the command set to register/deregister collection
  - fix missing allocation check in read_script_output()
  - drop recursive ownership of /usr/lib within SCL root
  - introduce %scl_dependency_generators macro


author: Lubos Kardos <lkardos@redhat.com - 20130529-7
changelog:
  Support for importing collections from NFS mounts
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-2.el7
changelog:
  - seabios-fw-pci-add-Q35-S3-support.patch [bz#1185721]
  - Resolves: bz#1185721
    (win7 guest (boot with q35) show dark screen after do S3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-3.el7
changelog:
  - seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
  - seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
  - Resolves: bz#1327060
    ([Seabios]Limited boot number supported for SCSI/SATA)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-4.el7
changelog:
  - seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
  - Resolves: bz#1327001
    (vgabios-virtio.bin should be included  in seavgabios-bin package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7
changelog:
  - seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
  - Resolves: bz#1373154
    (Guest fails boot up with ivshmem-plain and virtio-pci device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7_3.1
changelog:
  - seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
  - Resolves: bz#1392028
    ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.1-2.el7
changelog:
  - seabios-smm-disable-by-default.patch [bz#1378006]
  - seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
  - Resolves: bz#1378006
    (guest paused on target host sometimes when do migration during guest boot)
  - Resolves: bz#1418320
    (Seabios does not fully reset AHCI adapters)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-2.el7
changelog:
  - seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
  - Resolves: bz#1428347
    (reboot hangs on rhel6 machine types (~1/20 times))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-3.el7
changelog:
  - seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
  - seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
  - seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
  - seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
  - Resolves: bz#1020622
    (seabios fail to recognize virtio-scsi device if specify LUN not 0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.10.2-3.el7_4.1
changelog:
  - seabios-virtio-IOMMU-support.patch [bz#1472131]
  - Resolves: bz#1472131
    (Guest OS will down when disk enable the IOMMU for Virtio)


author: Wainer dos Santos Moschetta <wainersm@redhat.com> - 1.10.2-4.el7
changelog:
  - seabios-virtio-IOMMU-support.patch [bz#1463163, bz#1467811]
  - Resolves: bz#1463163
    (Guest OS will down when disk enable the IOMMU for Virtio)
  - Resolves: bz#1467811
    (Guest OS will down when disk enable the IOMMU for virtio-scsi)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.10.2-5.el7
changelog:
  - seabios-boot-Rename-drive_g-to-drive.patch [bz#1452603]
  - seabios-disk-Don-t-require-the-struct-drive_s-to-be-in-the-f.patch [bz#1452603]
  - seabios-block-Rename-disk_op_s-drive_gf-to-drive_fl.patch [bz#1452603]
  - seabios-virtio-Allocate-drive_s-storage-in-low-memory.patch [bz#1452603]
  - Resolves: bz#1452603
    (can't bootup from image when attached multi-virtio-scsi disks with multi-luns)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.0-2.el7
changelog:
  - seabios-pci-fix-io-hints-capability-for-RedHat-PCI-bridges.patch [bz#1523166]
  - Resolves: bz#1523166
    ([Q35] guest kernel panic when boot with 9 nics)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-8.el7
changelog:
  - seabios-turn-off-stack-switching-for-vgabios.patch [bz#1182634]
  - Resolves: bz#1182634
    (Remove CONFIG_VGA_ALLOCATE_EXTRA_STACK)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-9.el7_1
changelog:
  - seabios-boot.c-delay-exiting-boot-if-menu-key-is-ESC.patch [bz#841638]
  - seabios-boot-switch-default-menu-key-to-ESC.patch [bz#841638]
  - Resolves: bz#841638
    (Provide a platform agnostic approach to invoking the BIOS, boot menu, or other BIOS functions)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.5-10.el7
changelog:
  - seabios-fw-pci-scan-all-buses-if-extraroots-romfile-is-prese.patch [bz#1235381]
  - seabios-fw-pci-map-memory-and-IO-regions-for-multiple-pci-ro.patch [bz#1235381]
  - Resolves: bz#1235381
    (RFE: configure guest NUMA node locality for guest PCI devices)


author: Yash Mankad <ymankad@redhat.com> - 1.7.5-11.el7
changelog:
  - seabios-bootorder-Update-extra-pci-root-buses-bootorder-form.patch [bz#1242968]
  - Resolves: bz#1242968
    (pci: support booting of devices behind PXB)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7_3.2
changelog:
  - seabios-acpi_extract-Move-main-code-to-new-function-main.patch [bz#1400102]
  - seabios-acpi_extract-Make-the-generated-.hex-files-more-huma.patch [bz#1400102]
  - seabios-acpi_extract-Don-t-generate-unused-and-empty-q35-acp.patch [bz#1400102]
  - seabios-acpi-Don-t-build-SSDT-files-on-every-build-store-the.patch [bz#1400102]
  - Resolves: bz#1400102
    (decouple the SeaBIOS build from iasl)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.1-5.el7_3.3
changelog:
  - seabios-resume-Make-KVM-soft-reboot-loop-detection-more-flex.patch [bz#1440706]
  - seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1440706]
  - Resolves: bz#1440706
    (reboot hangs on rhel6 machine types (~1/20 times))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-2
changelog:
  - Disable options not used / not supported by RHEL-7 (rhbz 927582)
  - Add pvpanic device driver (rhbz 967777)
  - Obsolete vgabios (rhbz 976340)


author: Miroslav Rezanina <mrezanin@redhat.com> - seabios-1.7.2.2-3.el7
changelog:
  - seabios-floppy-Introduce-struct-floppy_pio_s-for-floppy-PIO-.patch [bz#920140]
  - seabios-floppy-Cleanup-floppy-irq-wait-handling.patch [bz#920140]
  - seabios-floppy-Implement-media-format-sensing.patch [bz#920140]
  - seabios-Place-rpm-version-info-into-version-banner.patch [bz#894979]
  - seabios-ahci-add-missing-check-for-allocation-failure.patch [bz#1005747]
  - Resolves: bz#1005747
    (fail to boot rhel7 guest with >126(21 ahci controller) ahci disks)
  - Resolves: bz#894979
    (place rpm version info into version banner)
  - Resolves: bz#920140
    (qemu-kvm emulation of 2.88M floppy fails)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-4.el7
changelog:
  - seabios-Introduce-and-convert-pmm-code-to-use-standard-list-.patch [bz#947051]
  - seabios-Fix-error-in-hlist_for_each_entry_safe-macro.patch [bz#947051]
  - seabios-Another-fix-for-hlist_for_each_entry_safe.patch [bz#947051]
  - seabios-uas-add-temporary-superspeed-stopgap.patch [bz#947051]
  - seabios-usb-add-usb_update_pipe.patch [bz#947051]
  - seabios-usb-add-xhci-support.patch [bz#947051]
  - seabios-xhci-adaptions-for-old-rhel7-seabios-codebase.patch [bz#947051]
  - seabios-allow-1TB-of-RAM.patch [bz#1016974]
  - Resolves: bz#1016974
    ([HP 7.0 FEAT]: Increase KVM guest supported memory to 4TiB)
  - Resolves: bz#947051
    ([RFE] implement xhci support in seabios)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-5.el7
changelog:
  - seabios-build-explicitly-set-ROM-size.patch [bz#1038604]
  - Resolves: bz#1038604
    (make seabios 256k for rhel7 machine types)


author: Michal Novotny <minovotn@redhat.com> - seabios-1.7.2.2-6.el7
changelog:
  - seabios-biostables-support-looking-up-RSDP.patch [bz#1034877]
  - seabios-romfile_loader-utility-to-patch-in-memory-ROM-files.patch [bz#1034877]
  - seabios-acpi-load-and-link-tables-through-romfile-loader.patch [bz#1034877]
  - Resolves: bz#1034877
    (export acpi tables to guests (seabios))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-8.el7
changelog:
  - seabios-vgabios-Fix-cirrus-memory-clear-on-mode-switch.patch [bz#979898]
  - Resolves: bz#979898
    ([qemu-kvm]The win2k3-32 guest display is abnormal when using -vga cirrus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-10.el7
changelog:
  - Fixed seavgabios-bin obsoletes/provides [bz#1035452]
  - Resolves: bz#1035452
    ( seavgabios-bin has bad obsoletes/provides for "vgabios")


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-11.el7
changelog:
  - seabios-init_virtio_scsi-reset-the-HBA-before-freeing-its-vi.patch [bz#1013418]
  - seabios-smbios-catch-zero-length-strings.patch [bz#1052837]
  - seabios-resume-restore-piix-pm-config-registers-after-resume.patch [bz#1049860]
  - seabios-pci-align-64bit-pci-regions-to-1G.patch [bz#1055832]
  - seabios-pci-log-pci-windows.patch [bz#1055832]
  - seabios-pci-improve-io-address-space-allocation.patch [bz#1055832]
  - Resolves: bz#1013418
    (qemu-kvm with a virtio-scsi controler without devices attached quits after stop/cont in HMP/QMP)
  - Resolves: bz#1049860
    (Guest agent command hang there after restore the guest from the save file)
  - Resolves: bz#1052837
    (The wrong DMI structures could not be decoded while booting vm with -smbios params)
  - Resolves: bz#1055832
    (can not see seabios GUI when boot with 155 virtio-blk-pci disks via pci-bridge)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-12.el7
changelog:
  - seabios-Workaround-for-a-win8.1-32-S4-resume-bug.patch [bz#1050775]
  - Resolves: bz#1050775
    ([whql]KVM internal error. Suberror: 1 when win8.1-32 guest run HCK jobs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.2.2-12.el7_0.1
changelog:
  - seabios-smbios-set-bios-vendor-version-fields-to-Seabios-0.5.patch [bz#1124216]
  - Resolves: bz#1124216
    (smbios table 0 vendor string should be Seabios (for rhel6 compatibility) [7.1+7.0.z])


author: Rui Matos <rmatos@redhat.com> - 3.8.0-5
changelog:
  - Fix for "seahorse-nautilus broken by glib2 regression related to
    SIGCHLD warnings"
  - Resolves: #1093123


author: Rui Matos <rmatos@redhat.com> - 3.4.0-2
changelog:
  - Use rpm macros to define the version number
  - Do verbose builds
  - Fix %files entries to comply with ownership rules


author: Jan Görig <jgorig@redhat.com> 4.2.1-5
changelog:
  - fixed make check on non UTF-8 locale - upstream patch rhbz#550731
  - readded -c option (thanks Paolo Bonzini) rhbz#566455
  - removed previous -c dummy patch
  - changed license to GPLv3+


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Jakub Martisko <jamartis@redhat.com> - 4.2.2-7
changelog:
  - Fix: "in-place edits on FUSE filesystems create files with all-zero mode bits"
    Resolves: #1836317


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-249
changelog:
  - Allow nrpe_t domain to read process state of systemd_logind_t
  - Add interface systemd_logind_read_state()
  Resolves: rhbz#1653309


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-252.4
changelog:
  - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command.
  Resolves: rhbz#1766095


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-256
changelog:
  - Allow cupsd_t domain to manage cupsd_tmp_t temp link files
  Resolves: rhbz#1719754
  - Allow svnserve_t domain to read /dev/random
  Resolves: rhbz#1727458
  - Update sudodomains to make working confined users run sudo/su
  Resolves: rhbz#1699391


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-258
changelog:
  - Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
  Resolves: rhbz#1688729
  - Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
  Resolves: rhbz#1658319


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-259
changelog:
  - Allow ganesha_t domain to read system network state and connect to cyphesis_port_t
  Resolves: rhbz#1653857
  - Label /var/log/collectd.log as collectd_log_t
  - Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
  Resolves: rhbz#1688729
  - Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
  Resolves: rhbz#1658319
  - Update sbd policy to allow manage cgroups
  Resolves: rhbz#1715136
  - Allow sudo userdomain to run rpm related commands
  - Update rpm_run() interface to avoid duplicate role transition in sudo_role_template
  Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-261
changelog:
  - Update sudo_role_template() to allow caller domain to read syslog pid files
  Resolves: rhbz#1651253


author: Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-264
changelog:
  - Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command
  Resolves: rhbz#1765063


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-267
changelog:
  - Allow chronyd_t domain to exec shell
  Resolves: rhbz#1775573
  - Allow pmie daemon to send signal pcmd daemon
  Resolves: rhbz#1770123
  - Allow auditd poweroff or switch to single mode
  Resolves: rhbz#1780332


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-268
changelog:
  - Allow rhsmd read process state of all domains and kernel threads
  Resolves: rhbz#1837461
  - Allow ipa-adtrust-install restart sssd and dirsrv services
  Resolves: rhbz#1820298
  - Allow nagios_plugin_domain execute programs in bin directories
  Resolves: rhbz#1824625
  - selinux policy: add the right context for org.freeipa.server.trust-enable-agent
  Related: rhbz#1820298


author: Zdenek Pytela <zpytela@redhat.com> - 3.13.1-268.2
changelog:
  - Allow certmonger add new entries in a generic certificates directory
  Resolves: rhbz#1879496
  - Allow slapd add new entries in ldap certificates directory
  Resolves: rhbz#1879496
  - Add miscfiles_add_entry_generic_cert_dirs() interface
  Resolves: rhbz#1879496


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
  - Explicitly enabled sm-client statistics
    Resolves: rhbz#890585
  - Enable ECDHE support
    Resolves: rhbz#1124827
  - Properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    Resolves: rhbz#1210914
  - Added makemap and its manual page into alternatives
    Resolves: rhbz#1225891
  - Modified nm-dispatcher script to asynchronously restart sendmail and
    not block the connection activation
    Resolves: rhbz#1237070
  - Added config options allowing disablement of TLS 1.1/2
    Resolves: rhbz#1281476
  - Fixed problem with e-mails not sending from IPv6 enabled server
    to servers with MX record pointing to CNAME
    Resolves: rhbz#1294870
  - Added editmap
    Resolves: rhbz#1342393
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1395102
  - Fixed op.pdf
    Resolves: rhbz#1401070


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-6
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT
    Resolves: rhbz#1596725


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.26-1
changelog:
  - get_alert() and get_all_alerts_since() DBUS APIs change to use
    number of microseconds instead of date string
  - level = debug can be set separately for sealert_log and setroubleshootd_log
  - added new directive to setroubleshootd_log - log_full_report = True|False
  - added new methods to DBUS API:
    set_filter(), get_all_alerts_ignored(), delete_alert()
  - suggest my-<command>.pp modules instead of mypol.pp
  - setroubleshoot.conf cleanup
  - bug fixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.28-1
changelog:
  - Fix sealert message for capability2
  - Spelling fixes
  - sealert - provide a better error message when SELinux is disabled (#1420084)
  - Fix report problem summary string (#1343397)
  - Update setroubleshootd.8 (#1348140)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.29-1
changelog:
  - Fix sealert message for process2 (#1507909)
  - Remove additional "If " string from plugin messages (#1177347)
  - Fix semi-translated messages (#1332126)
  - Make labels on GtkButtons translatable
  - Set translation domain for Gtk.Builder() object to have strings correctly translated (#1370100)
  - Do not split If sentences to framework and plugins (#1177347)
  - Don't stop when the plugin directory is empty
  - Change "check_for_man" return value upon failure
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin 
  - Fix sealert crash when setroubleshootd fails to start (#1405003)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-1
changelog:
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Remove unused booleans.py file
  - src/sealert: Finish dbus communication after error (#1461486)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-3
changelog:
  - Check for the existence of setroubleshoot group separately (#1478118)
  - Fix AVC.__typeMatch to handle aliases properly (#1459844, #1459835, #1459875)
  - Fix allowed_target_types (#1460642, #1460648)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-4
changelog:
  - Catch exceptions caused by lookup_signature (#1636369, #1627908)
  - Fix translation of hex values in AVCs (#1477236)


author: Dan Walsh <dwalsh@redhat.com> - 3.0.57-1
changelog:
  - Add restorecon_source plugin, to check the source program is labeled correclty.
  - Fix restorecon.py to handle customized_files properly.
  - Update Translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.62-1
changelog:
  - Suggest my-<command>.pp modules instead of mypol.pp (#1329037)
  - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended
  - Suggest to use ausearch instead of grep


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.65-1
changelog:
  - Remove duplicated strings from sys_resource.py
  - Spelling fixes
  - Fix catchall plugin message for capability2
  - Stop executing restorecon plugin on specified path prefixes


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.66-1
changelog:
  - Fix catchall plugin message for process2 (#1507909)
  - Correct grammatical errors (#1331780)
  - Do not split If sentences to framework and plugins (#1177347)
  - Fix typo in "lt" translation header (#1468985)
  - catchall_boolean.py - 'None' man page is None man page
  - Fix restorecon "then" text (#1332097)


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.67-1
changelog:
  - bind_ports: Do not use when there are no allowed_target_types (#1255627)
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Update translations


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-3
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-5
changelog:
  - reserve uidgid pair 142:142 for activemq (#1086923)
  - add xfs to /etc/filesystems, fallback to /proc/filesystems
    (#1123832)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-6
changelog:
  - change reservation of 185:185 to jboss user (#1192413)
  - reserve uidgid pair 167:167 for ceph (#1221043)
  - reserve uidgid for systemd-network(192:192) (#1213820)
  - reserve uidgid for systemd-resolve(193:193) (#1213820)
  - mention systemd-jounal-gateway can be dynamic (#1213820)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-7
changelog:
  - add basic empty subuid/subgid files for docker (#1311278)
  - specify full path to utilities in /etc/profile and /etc/bashrc
    (#1331871)


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-8
changelog:
  - fix group id for tape in /etc/group (should be 33) (#1433020)
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Ondrej Vasik <ovasik@redhat.com> - 2.8.71-10
changelog:
  - fix crudp name in /etc/protocols (#1566469)
  - do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells
    (#1571104)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.67-1
changelog:
  - assign 166:166 uidgid pair for ceilometer (#923891)
  - change 187:187 reservation from openstack-heat
    to just heat(#923858)
  - longer shell names support caused by UsrMove to
    the /etc/shells (#922527)
  - drop gopher (uid 13, gid 30) from groups created by default
    -> dropped completely - no gopher server in Fedora (#918206)
  - drop dip (gid 40) from groups created by default
    -> moved to ppp (#918206)
  - drop uucp (uidgid 14) from groups created by default
    -> moved to uucp (#918206)
  - create cdrom, tape, dialout, floppy groups in setup(#919285)


author: Gris Ge <fge@redhat.com> 1.37-17
changelog:
  - Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
    (RHBZ #1359282, #1359286, #1359292)


author: Tomas Bzatek <tbzatek@redhat.com> 1:1.37-19
changelog:
  - Reorder 59-fc-wwpn-id.rules to run after 60-persistent-storage.rules (#1785303)
  - Fix the 59-fc-wwpn-id.rules syntax (#1750417)
  - Add 59-fc-wwpn-id.rules (#1684302)


author: Richard W.M. Jones <rjones@redhat.com> - 0-1.1.20110622svn
changelog:
  - Fix date in release string.
    NB: To make this version > than the previous, I had to use 1.1.20110622
    instead of 0.1.20110622, since the old second field was 20110623.
  - Unset MAKEFLAGS, since parallel make breaks the build.
  - Bring the spec file up to modern standards.


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-6
changelog:
  - report error to stdout when SELinux context for home directory
    cannot be determined (#973647)
  - audit the changing home directory owner (#885797)
  - do not set the default SELinux MLS range (#852676)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-8
changelog:
  - slightly more meaningful error messages if crypt() returns NULL (#988184)
  - explicit suid permissions


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25
changelog:
  - prevent creating users ".." or "." or with all numeric usernames (#1373645)
  - raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)
  - consider also supplementary group membership in newgrp (#1425078)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25.1
changelog:
  - re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
    environment variable is set (#1651450)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - rebase to current upstream release to bring newuidmap and newgidmap
  - re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
    environment variable is set


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-2
changelog:
  - ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - correct wrong SUB_UID/GID_COUNT default in manual page (#1690522)


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 1.0-4
  - defaults.list: s/mozilla-firefox/firefox/ (see #736558)
  - defaults.list: s/gpk-install-file/gpk-install-local-file/
  - defaults.list: application/x-catalog=gpk-install-catalog.desktop (#770019)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
  - Fix decoding from positional argument while overriding output file
    (bug #901895)
  - Fix decoding to standard output when output file is - or /dev/stdout
    (bug #901895)


author: Peter Jones <pjones@redhat.com> - 0.7-7
changelog:
  - Make sure we use the right keys on Aarch64.
    (It's only a demo at this stage.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build for aarch64 as well 
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    (I managed to fix the inputs but not the outputs in -9.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build -8 for arm as well.
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Fix a couple more minor bugs aavmf has found in fallback.
    Related: rhbz#1190191
  - Build lib/ with the right CFLAGS
    Related: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Peter Jones <pjones@redhat.com> - 15-3
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.  Again.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.
    Again, but without breaking aarch64 this time.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Fix a couple more things that are breaking reproducability, and thus
    breaking external review.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-6
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8.el7
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1862045
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 15-8.el7.cloudlinux
changelog:
  - CloudLinux de-branding: vanish db.x64.esl file and add securebootca.cer back.
  - Changes efidir to centos to avoid migration issues.


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-7
changelog:
  - Use new archive from upstream at same location (which is lowercase now)
  - Remove dubious Provides: (RHBZ#563395)


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.0-8
changelog:
  - Fix Obsolete: that was wrong when renaming the package.
  - The font base folder was listed twice (one was hidden in the font macro)


author: Minto Joseph <mvaliyav at redhat.com> - 2.4-4
changelog:
  - Cleaned up the spec file as per new font packaging guidelines
  - Replaced padauk-src.ttf and padaukbold-src.ttf with Padauk.ttf and Padauk-Bold.ttf [490583]
  - Renamed the package to sil-padauk-fonts


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.3.0-6
changelog:
  - Add ASM dependency only to a single module, not all of them
  - Disable animal-sniffer plugin
  - Don't generate auto-requires for optional dependencies


author: Michal Srb <msrb@redhat.com> - 2.3.0-7
changelog:
  - sisu-inject-bean: add dependency on asm
  - Fix dependencies on javax.inject and javax.enterprise.inject
  - Remove bundled JARs and .class files from tarball


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-8
changelog:
  - Remove unneeded animal-sniffer BuildRequires
  - Add forge-parent to BuildRequires to ensure it's present


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
changelog:
  - Fix reported coverity issues
  - Make sure slapi-nis continue to work with SSSD 1.14 when default domain is defined
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-4
changelog:
  - Fixed: UPN-based search for AD users does not match an entry in slapi-nis map cache
  - Resolves: #1361123
  - Fixed: slapi-nis plugin modifies DS data
  - Resolves: #1360245


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-5
changelog:
  - Resolves: #1473572
  - Fixed: Make changes in overrides available in the compat tree at runtime
  - Resolves: #1473577
  - Fixed: slapi-nis should use requests to SSSD with ability to cancel them with a timeout


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-8
changelog:
  - Fixed: #1473572
  - Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
  - Related: #1473577
  - Synchronize timeout-enabled code with ipa-extdom-extop


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
  - Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
  - Resolves: rhbz#1830894 Memory leak during search of idview overrides


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-4
changelog:
  - CVE 2021-3480:  slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1942937


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Resolves: rhbz#1978748
    Release adds following fixes:
    - Fix ID views integration
    - Fix base scope lookups
    - Bump NIS max dgram size to 8KB by default instead of 1KB
    - Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11869


author: Michal Hlavinka <mhlavink@redhat.com> - 1:6.5-1
changelog:
  - smartmontools updated to 6.5
  - adds support for NVMe devices (#1369731)
  - minor spec cleanup (#1463148)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:7.0-1
changelog:
  - smartmontools updated to 7.0 (#1588532)
  - fixed detection of Device Statistics log with 256 sectors (#1590190)


author: Rajeesh K Nambiar <rajeeshknambiar@gmail.com> 5.0.1-1
changelog:
  - New upstream release 5.0.1 introducing Unicode 5.1 compatibility
  - Resolves Meera size issues
  - Drop upstreamed patches for RHBZ# 545683, 616324 and 781938
  - Resolves RHBZ# 803183
  - Spec cleanup


author: Pravin Satpute <psatpute@redhat.com> 5.0.1-2
changelog:
  - Resolved bug 803234
  - Updated panose for Meera, RaghuMalayalam and Kalyani
  - Changed conf file of Rachana from Sans to Serir


author: Pravin Satpute <psatpute@redhat.com> 6.0-1
changelog:
  - Resolves: rh#1023847 - Upstream new release with fix against Harfbuzz NG
  - New release 6.0 with many new features and bug fixes
  - v2 opentype spec support for Malayalam (mlm2) for Meera, Rachana, Raghumalayalam
  - Full support to Harfbuzz, Adobe and Uniscribe shaping engines
  - Cleaned up and updated lookup tables
  - Meaningful names to glyphs to help with Lookup tables reusability
  - Old Figures and other Typographical glyphs to Rachana
  - Dotreph positioning using GPOS 'abvm' lookup
  - Unicode 6.1 Malayalam glyphset for many fonts


author: Michal Srb <msrb@redhat.com> - 1.11-5
changelog:
  - Replace bundled base64 implementation
  - Replace bundled gdata-java-client classes with apache-commons-codec


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.0-3
changelog:
  - Resolves: rhbz#1507409 ObjectStore.cpp(59): Failed to enumerate object store in /var/lib/softhsm/tokens/
  - Resolves: rhbz#1540010 gnome-settings-daemon: gnome-settings-daemon killed by SIGSEGV


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-6
changelog:
  - [utilities] Fix high CPU usage and slow command collection
    Resolves: bz1733367
  - [sosreport,plugins] Stop plugin execution after timeout hit
    Resolves: bz1731007


author: Pavel Moravec <pmoravec@redhat.com> = 3.8-3
changelog:
  - [gluster] process files only from a statedump dir
    Resolves: bz1699381
  - [kernel] Don't collect trace file by default
    Resolves: bz1757662


author: Jan Jansky <jjansky@redhat.com> = 3.8-8
changelog:
  - Added Obsolete for leapp-repository-sos-plugin to solve
    conflicts during install/upgrade/downgrade of RPM.


author: Jan Jansky <jjansky@redhat.com> = 3.9-3
changelog:
  - [gluster] fix gluster volume splitlines iteration
    Resolves: bz1843520
  - [block] proper parsing of luks partition on self device
    Resolves: bz1850544
  - [pci] Update gating for lspci commands
    Resolves: bz1853701
  - [foreman] collects stats of some tables from foreman DB
    Resolves: bz1853235
  - [logs] collect also non-persistent journal logs
    Resolves: bz1850925


author: Jan Jansky <jjansky@redhat.com> = 3.9-5
changelog:
  - [gluster] remove generated state files
    Resolves: bz1857697
  - [kubernetes] ignore blank+empty lines
    Resolves: bz1859885
  - [networking] remove 'ethtool -e' option for bnx2x NICs
    Resolves: bz1870379
  - [auditd] collect /etc/audisp
    Resolves: bz1871207
  - [policy] Fix several failure conditions with upload
    Resolves: bz1886432
  - [postgresql] reorganize postgres from SCL
    Resolves: bz1897903


author: Jan Jansky <jjansky@redhat.com> = 3.9-5.3
changelog:
  - [candlepin/foreman] psql with --no-password
    Resolves: bz1932772
  - [foreman] proxy_password scrub in installer logs
    Resolves: bz1785813


author: Jan Jansky <jjansky@redhat.com> = 3.9-5.4
changelog:
  - [candlepin/foreman] psql with --no-password
    Resolves: bz1932772
  - [pacemaker] password scrub fix
    Resolves: bz1903144
  - [filesys] never collect panfs
    Resolves: bz1886784
  - [openstack_ceilometer] backend_url protected
    Resolves: bz1892692


author: Jan Jansky <jjansky@redhat.com> = 3.9-5.5
changelog:
  - [sssd] Add individual SSSD log files
    Resolves: bz1938932
  - [sssd] sssd plugin when sssd-common
    Resolves: bz1946641
  - [foreman] fix unmatched group in scrubbing installer logs
    Resolves: bz1956817
  - [foreman] Sizelimit foreman-maintain and installer logs
    Resolves: bz1964000
  - [pulpcore] add plugin for pulp-3
    Resolves: bz1956672


author: Barbora Vassova <bvassova@redhat.com> = 3.9-5.12
changelog:
  - [redhat] Change authentication method for RHEL
    Resolves: RHEL-21176
  - [rpm] Capture the output of 'rpm --showrc'
    Resolves: RHEL-2357
  - [candlepin] collect information about SCA
    Resolves: RHEL-22263
  - [foreman] scrub admin init password in installer logs
    Resolves: RHEL-22264


author: Jake Hunsaker <jhunsake@redhat.com> - 1.5-3
changelog:
  - Resolve race condition in cluster profile loading
  - Quote all options globally
  - RHBZ#1633515
  - RHBZ#1647955


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-3
changelog:
  - Fix local command execution
  - Fix quoting for non-root commands
  - Backport Satellite support
  - Backport RHCOS support


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
  - Fix 'none' cluster type enablement
  - Update RHCOS image to use RHEL 8 support-tools
  - Fix execution from within a container


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
  - removed liblpc10 from source tarball due to licensing uncertainity
  - added license file to libgsm
  - fixed bogus dates in changelog


author: Jiri Kucera <jkucera@redhat.com> - 14.4.1-7
changelog:
  - Fix CVE-2017-18189
    Upstream patch: https://sourceforge.net/p/sox/code/ci/09d7388c8ad5701ed9c59d1d600ff6154b066397/
    Resolves: #1553590


author: Kevin Fenzi <kevin@scrye.com> - 3.3.2-12
changelog:
  - Fix sa-update not detecting spamd running. Fixes bug #755644
  - Add restart=always to systemd file to work around upstream bug. Bug #812359


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
  - document rawbody's split into chunks (#892350)
  - avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
  - update to 3.4.0
  - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-3
changelog:
  - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
  - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
  - scan timeouts and resulting denial of service
  - Resolves: rhbz#1632998


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-4
changelog:
  - Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
  - which are no longer auto-generated due to a (expected) change in rpm-build
  - Related: rhbz#1632998


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-3
changelog:
  - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
  - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
  - scan timeouts and resulting denial of service
  - Resolves: rhbz#1632999


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-4
changelog:
  - Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
  - which are no longer auto-generated due to a (expected) change in rpm-build
  - Related: rhbz#1632999


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Yonit Halperin <yhalperi@redhat.com> 0.12.4-1
changelog:
  - New upstream release 0.12.4
  - Require libjpeg-turbo-devel instead of libjpeg-devel
  - Remove "BuildRequires: spice-protocol" from spice-server
  - Add "Requires: spice-protocol" to spice-server-devel.


author: Hans de Goede <hdegoede@redhat.com> - 0.12.4-1
changelog:
  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Fix qemu crash during migration with reboot
    Resolves: rhbz#1016795
  - Monitor whether the client is alive
    Resolves: rhbz#1016790


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-2
changelog:
  - Add missing patch for rebase
    Resolves: rhbz#1402474
  - Add obsoletes to the spec file to ease updates
    Resolves: rhbz#1432776
  - Fix black screen in virt-manager
    Resolves: rhbz#1433242
  - Make connection error message more clear
    Resolves: rhbz#1365736


author: Victor Toso <victortoso@redhat.com> - 0.33-3
changelog:
  - Avoid CRITICALs on copy-paste
    Resolves: rhbz#1440096
  - Avoid assertions on file-xfer while agent disconnects
    Related: rhbz#1440096


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-4
changelog:
  - Make connection error message more clear
    Resolves: rhbz#1365736
  - Improve audio debug
    Resolves: rhbz#1436249
  - Fix wrong encoding of transferred files
    Resolves: rhbz#1440206


author: Victor Toso <victortoso@redhat.com> - 0.35-5
changelog:
  - Keepalive fix
    Resolves: rhbz#1719736
  - Fix hang on migration after password expired
    Resolves: rhbz#1761776


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-1
changelog:
  - Rebase to 0.22
    Resolves: rhbz#1109397
  - Fix screenshot of secondary displays
    Resolves: rhbz#1029761
  - Fix potential crash when freeing primary surface.
    Resolves: rhbz#1082555
  - Add RHEL-only SPICE_NOSCALE to disable display scaling.
    Resolves: rhbz#1067346
  - Fix connection to RHEL5 Spice server
    Resolves: rhbz#1017862
  - Fix coroutine leak
    Resolves: rhbz#1007841
  - Fix clipboard hang on clipboard loop
    Resolves: rhbz#1073364


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.22-2
changelog:
  - Additional display pop out when restarting service spice-vdagentd in guest
    Resolves: rhbz#1043782
  - Coverity scan fixes
    Resolves: rhbz#885719
  - Send data message for file copy of 0 size
    Resolves: rhbz#1135104
  - add spice_channel_get_error()
    Resolves: rhbz#1116048
  - Prefix proxy lookup errors
    Resolves: rhbz#1116048


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.26-1
changelog:
  - Rebase to 0.26
    Resolves: rhbz#1214101
  - Allow to transfer multiple files at once
    Resolves: rhbz#1167829
  - Fix smartcard cannot work after restart guest
    Resolves: rhbz#1205548


author: Fabiano Fidêncio <fidencio@redhat.com> - 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242602
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247907
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1244878
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1235442
  - Print file transfer summary to the log
    Resolves: rhbz#1140512
  - Enable proxy when requested
    Related: rhbz#1182252


author: Victor Toso <victortoso@redhat.com> - 0.26-6
changelog:
  - Implements volume-sync from guest to client
    Resolves: rhbz#1264105
  - Avoid crash in virt-manager
    Resolves: rhbz#1301863
  - Fix focus in fullscreen mode
    Resolves: rhbz#1275231
  - Add Client capability for Windows monitor_config message
    Resolves: rhbz#1248189
  - Fix error message for file transfer
    Resolves: rhbz#1265562


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-7
changelog:
  - Improve message for number of usb channels in usb device widget
    Resolves: rhbz#1299931
  - Fix usbredir leak when redirecting a webcam
    Resolves: rhbz#1270363


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-8
changelog:
  - Check runtime usbredir version
    Resolves: rhbz#1320827
  - Allow connection to password protected guests
    Resolves: rhbz#1320806
  - Fix runtime warnings related to shared folders and usb redirection
    Resolves: rhbz#1319405
  - Change runtime warning for empty monitor config to debug message
    Resolves: rhbz#1319405
  - Fix 16 bpp LZ image decompression
    Resolves: rhbz#1285469


author: Victor Toso <victortoso@redhat.com> - 0.31-3
changelog:
  - Fix client's crash when agent is killed
    Resolves: rhbz#1336321
  - Parse ipv6 address
    Resolves: rhbz#1335239
  - Improving parsing of Smartcard messages
    Resolves: rhbz#1338727
  - Fix hangs with "Connected to graphic server"
    Resolves: rhbz#1323092


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-4
changelog:
  - Fix SASL GSSAPI (kerberos authentication)
    Resolves: rhbz#1343361
  - Allow to connect to ipv6 behind proxy
    Resolves: rhbz#1331777


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-5
changelog:
  - Allow to connect to ipv6 without proxy
    Resolves: rhbz#1361478
  - Silence a critical when migrating
    Resolves: rhbz#1356162
  - Disable EPOXY / EGL usage
    Resolves: rhbz#1362460


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 15-7
changelog:
  - Fix build requires and requires (#884632)
  - Cleanup specfile for latest guidelines 
  - Add ASL license text


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-7
changelog:
  - Fix off-by-one error during guest-to-host memory address conversion
    Resolves: CVE-2019-3813
  - Add patch for upstream commit 48179332d9da0. This should help with corrupted
    spice-html5 displays
    Resolves: rhbz#1573739
  - Add missing minimum openssl version Requires for patch #24
    Resolves: rhbz#1627693


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
  - Fix 'Dependency failed for Activation socket' message
    Resolves: rhbz#1545212
  - Fix socket leak
    Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
  - Fix clipboard logs on requests for targets on grab from client
    Resolves: rhbz#1594876
  - Make some clipboard logs debug instead of error
    Resolves: rhbz#1686008


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15
changelog:
  - Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
    sites
  - Resolves: #1717430 - Excessive memory usage when running out of descriptors
  - Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
  - Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
    in cachemgr.cgi
  - Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15.1
changelog:
  - Resolves: #1828359 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828360 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow
  - Resolves: #1829772 - CVE-2019-12525 squid: parsing of header
    Proxy-Authentication leads to memory corruption


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17
changelog:
  - Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow [rhel


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17.2
changelog:
  - Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
    in HTTP Request processing
  - Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
    as reverse-proxy
  - Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
    attack against the HTTP cache
  - Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
    FTP Gateway


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17.4
changelog:
  - Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
    result in cache poisoning
  - Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
    result in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-17.6
changelog:
  - Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
    a trusted client to perform HTTP Request Smuggling


author: Stepan Broz <sbroz@redhat.com> - 7:3.5.20-17.10
changelog:
  - Resolves: RHEL-16779 - squid: NULL pointer dereference in the gopher protocol
    code -- Remove support for Gopher protocol (CVE-2023-46728)
  - Resolves: RHEL-18176 - squid: Buffer over-read in the HTTP Message processing
    feature (CVE-2023-49285)
  - Resolves: RHEL-18171 - squid: Incorrect Check of Function Return Value In
    Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-16758 - squid: Denial of Service in SSL Certificate validation
    (CVE-2023-46724)
  - Resolves: RHEL-19557 - squid: denial of service in HTTP request parsing
    (CVE-2023-50269)
  - Resolves: RHEL-26082 - squid: denial of service in HTTP header parser
    (CVE-2024-25617)


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 7:3.5.20-17.0.3.10.tuxcare.els1
changelog:
  - CVE-2021-28651: fix memory leak in RFC 2169 response parsing
  - CVE-2021-28652: fix broken cache manager URL parsing
  - CVE-2021-31806: fix memory management bug
  - CVE-2021-31807: fix integer overflow problem
  - CVE-2021-31808: fix input validation bug
  - CVE-2021-33620: handle more partial responses


author: Koba Karaputadze <kkaraputadze@cloudlinux.com> - 7:3.5.20-17.0.5.99.tuxcare.els2
changelog:
  - CVE-2025-62168: fix failure to redact HTTP authentication credentials in error
    handling to prevent information disclosure
  - email_err_data directive now defaults to 'off' for security (previously 'on')


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7:3.5.20-17.0.5.99.tuxcare.els4
changelog:
  - CVE-2026-33526: fix heap use-after-free due to double rfc1738_escape in ICP error handling
  - CVE-2026-33515: fix validation of ICP packet sizes and URLs to prevent out-of-bounds reads
  - CVE-2026-32748: fix HttpRequest use-after-free in ICP v3 query handling


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7:3.5.20-17.0.5.99.tuxcare.els5
changelog:
  - CVE-2021-28116: fix out-of-bounds read in WCCPv2 message parsing via
    stricter bounds validation of security, service, router, view, and
    capability items


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7:3.5.20-17.0.5.99.tuxcare.els6
changelog:
  - CVE-2023-49288: fix use-after-free in store_client lifetime by locking
    StoreEntry for the duration of the store_client object


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-16
changelog:
  - Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
    Proxy-Authentication leads to memory corruption


author: Doug Ledford <dledford@redhat.com> - 0.0.4-8.el6
changelog:
  - Update to latest upstream version so we can have an actual URL that works
  - Fix ups for pkgwrangler import and also fix bug reported against rhel5
    version of package (552915)
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 0.0.4-13
changelog:
  - Further tweaks to LSB init script headers
  - Add a %post and %preun scriptlets to add/remove the init script


author: Honggang Li <honli@redhat.com> - 1.0.3-1
changelog:
  - Update to latest upstream version 1.0.3.
  - Remove executable permission bits of srpd.service.
  - Start srpd.service before remote-fs service.
  - Resolves: bz1092530, bz1273181, bz1274119


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-31
changelog:
  - Remove -d from sss_override manpage
  - Related: rhbz#1259512 - sss_override : The local override user is not found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-33
changelog:
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-34
changelog:
  - Fix a Coverity warning in dyndns code
  - Resolves: rhbz#1261155 - nsupdate exits on first GSSAPI error instead
                             of processing other commands


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-35
changelog:
  - Resolves: rhbz#1250135 - Detect re-established trusts in the IPA
                             subdomain code


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-36
changelog:
  - Resolves: rhbz#1266107 - AD: Conditional jump or move depends on
                             uninitialised value


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40
changelog:
  - Resolves: rhbz#1270827 - local overrides: don't contact server with
                             overridden name/id


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-41
changelog:
  - Resolves: rhbz#1284814  - sssd: [sysdb_add_user] (0x0400): Error: 17
                             (File exists)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.2
changelog:
  - Resolves: rhbz#1311569 - [RFE] IPA: resolve external group memberships
                             of IPA groups during getgrnam and getgrgid


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.4
changelog:
  - Resolves: rhbz#1324442 - sssd be memory leak in sssd's memberof plugin
  - More patches from upstream related to the memory leak


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.5
changelog:
  - Resolves: rhbz#1336836 - IPA provider crashes if a netgroup from a
                             trusted domain is requested


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.6
changelog:
  - Resolves: rhbz#1337292 - In IPA-AD trust environment access is granted
                             to AD user even if the user is disabled on AD.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.7
changelog:
  - Resolves: rhbz#1339207 - sssd_nss memory usage keeps growing when trying
                             to retrieve non-existing netgroups


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.8
changelog:
  - Resolves: rhbz#1339258 - [sssd] Trusted (AD) user's info stays in sssd
                             cache for much more than expected.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.9
changelog:
  - Resolves: rhbz#1339509 - sssd tries to resolve global catalog servers
                             from AD forest sub-domains in AD-IPA trust setup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.11
changelog:
  - Resolves: rhbz#1353605 - sssd-libwbclient: wbcSidsToUnixIds should not
                             fail on lookup errors


author: Jakub Hrozek <jhrozek@redhat.com> - 1.13.0-40.12
changelog:
  - Resolves: rhbz#1356433 - ldap_group_external_member is no set for the
                             IPA provider


author: Sumit Bose <sbose@redhat.com> - 1.11.2-63
changelog:
  - Resolves: rhbz#1078877 - Valgrind: Invalid read of int while processing
                             netgroup


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-64
changelog:
  - Resolves: rhbz#1077328 - other subdomains are unavailable when joined
                             to a subdomain in the ad forest


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-65
changelog:
  - Resolves: rhbz#1082191 - RHEL7 IPA selinuxusermap hbac rule not always
                             matching


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-66
changelog:
  - Resolves: rhbz#1097323 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-67
changelog:
  - Fix a DEBUG message, backport two related fixes
  - Related: rhbz#1097323 - segfault in sssd_be when second domain tree
                             users are queried while joined to child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.1
changelog:
  - Resolves: rhbz#1098608 - Expanding home directory fails when the request
                             comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.2
changelog:
  - Backport a patch to allow krb5-utils-test to run as root
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.3
changelog:
  - Squash in upstream review comments about the PAC patch
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.4
changelog:
  - Rebuild for a proper dist tag
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.5
changelog:
  - Rebuild for a proper dist tag, yet again, now using the correct build
    options
  - Related: rhbz#1098608 - Expanding home directory fails when the request
                            comes from the PAC responder


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-68.6
changelog:
  - Resolves: rhbz#1152200 - Error processing universal groups with
                             cross-domain membership in SSSD server mode


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.1.0-1
  — Update to new stable release
  — Major refactoring now that some sanity prevailed upstream in font naming
    Be careful if you used the old font family names


author: DJ Delorie <dj@redhat.com> - 4.12-1
changelog:
  - Rebase to strace 4.12, which fixes...
    + Support BLKPG_RESIZE_PARTITION (#1329673)
    + Support getrandom() (#1374268)
    + Fix endless loop in io_submit (#1165548)
  - Merge upstream patches for vhangup and chown
  - Skip some tests on older kernels (RHEL 6)
  - Remove -m64 that rpm macros adds
  - Show mode with O_TMPFILE (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-2
changelog:
  - Adjust O_TMPFILE patch to include support even if the
    build-time headers don't have it. (#1377847)


author: DJ Delorie <dj@redhat.com> - 4.12-5
changelog:
  - Handle unexpected CLONE_PTRACE events. (#1466535)
  - Skip tests for s390/ppc64le as well as s390x/ppc64.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
    "tests: test evdev bitset decoding more thoroughly")
    to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
  - Copy over changes in tests/ioctl_evdev.c (from 5ee385e2
    "evdev: fix decoding of EVIOCGBIT(0, ...)") to tests-m32/ioctl_evdev.c
    and tests-mx32/ioctl_evdev.c
  - Resolves: #1746478


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Include upstream patches that fix issues reported by covscan:
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".
  - Resolves: #1747524


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-5
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790052):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"
    (A leftover for #1747524).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Fix expected alignment for IPC tests (#1795261):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-7
changelog:
  - Fix incorrect ifname printing buffer size (#2028146):
    e27b0677 "print_ifindex: fix IFNAME_QUOTED_SZ definition".


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.0-2
changelog:
  - Fixed initialization crash of IMV and IMC particularly
    attestation imv/imc as libstrongswas was not getting initialized.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-1
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - Modified spec file significantly to reflect the current state of
    the package, as this rebase enables several major modules: TNC
    client and server (IF-TNCCS), IMC-IMV (IF-M), PT-TLS (RFC 6876),
    SWID IMC/IMV, charon daemon and it related libs and modules,
    tnc-pdp, tnc-ifmap plugins.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-2
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - A typo caused a patch not being applied, so fixed that and
    bumping the number number.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-4
changelog:
  Resolves:#1067119
  - Fixed full hardening for strongswan (full relro and PIE).
    The previous macros had a typo and did not work
    (see bz#1067119).
  - Fixed files permissions for executables and config files to
    correctly reflect their intent.
  - Fixed tnc package description to eliminate rpmlint errors.
  - Fixed pki binary and moved it to /usr/libexece/strongswan as
    others binaries are there too to eliminate rpmlint errors.
  - Fixed systemd service name to "strongimv TNC".
  - Removed the dependency on gmp-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 5.2.0-1
changelog:
  Resolves: #1120371
  - Rebase to new upstream release 5.2.0
  - IMA/TPM based remote attestation
  - Aikgen tool to generate an Attestation Identity Key bound
    to a TPM
  - PT-EAP transport protocol (RFC 7171) for TNC
  - Enabled support for acert for checking X509 attribute certificate
  - Updates local patches
  - Spec file update
  - openac tool replaced with pki --acert


author: Avesh Agarwal <avagarwa@redhat.com> - 4.55-1
changelog:
  - New upstream realease 4.55
  - Updated local patches
  - enabled fips mode
  - Fixed for pod2man as it build-requires perl-podlators


author: Avesh Agarwal <avagarwa@redhat.com> - 4.56-1
changelog:
  - New upstream realease 4.56.
  - Updated local patches.
  - Fixed upstream URL in spec file.
  - Sourced URL of sha256 hash file in spec file.


author: Tomáš Mráz <tmraz@redhat.com> - 4.56-5
changelog:
  - Allow TLS 1.1 and TLS 1.2 in FIPS mode
  - Documentation fixes of curve and accept/connect options (#1197340)
  - Add negotiated protocol version to the logs (#1275613)


author: ckozak <ckozak@redhat.com> 1.10.13-1
changelog:
  - 1060917: catch exception thrown in firstboot (ckozak@redhat.com)
  - Extract the latest strings (bkearney@redhat.com)
  - 995121: require gnome-icon-theme for calendar icon (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-1
changelog:
  - Use glob for finding entitlement certs to remove. (dgoodwin@redhat.com)
  - Make sure entitlement cert directory exists before we clean it out.
    (dgoodwin@redhat.com)
  - safer default args in AsyncWidgetUpdater (ckozak@redhat.com)
  - use enumerate instead of confusing myself (ckozak@redhat.com)
  - Pull in latest strings from zanata (bkearney@redhat.com)
  - make sure entitlement has a pool before reading it (ckozak@redhat.com)
  - quickly load preferences (ckozak@redhat.com)
  - 1061937: preference changes occur in the background (ckozak@redhat.com)
  - use existing signals (ckozak@redhat.com)
  - simplify preferences window (ckozak@redhat.com)
  - Fix test failure if run on system that is registered. (dgoodwin@redhat.com)
  - 1061393: Don't allow subscription-manager string to be translated
    (ckozak@redhat.com)
  - 1016427: On string was missed from the extraction (bkearney@redhat.com)
  - 1058495: productid yum errors on yum remove (alikins@redhat.com)
  - 1026501: Preserve PKI directories and have rpm own them.
    (dgoodwin@redhat.com)
  - 1058374: Fix crash on exception in managergui._show_buttons
    (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-2
changelog:
  - updated tito.props to rev release (ckozak@redhat.com)
  - 958016: use rpm %{optflags} and _hardended_build (alikins@redhat.com)
  - 851325: Tweak activation key checkbox to left (alikins@redhat.com)
  - 1044596: Don't match beta product tags for release (alikins@redhat.com)
  - 1060727: Changes to rhsm-debug for sos report (wpoteat@redhat.com)
  - removed other releasers (ckozak@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-3
changelog:
  - 906567: Fix translations of "Red Hat" (alikins@redhat.com)
  - 1039914: rhsm-debug updates and fixes (alikins@redhat.com)
  - 1038242: add anaconda.pid check before chroot (alikins@redhat.com)
  - 1030378,1020474: Latest translations from zanata (alikins@redhat.com)
  - 1055664: rhsm-debug now follows more config paths (alikins@redhat.com)
  - 1021069: Add reference to network usage info. (alikins@redhat.com)
  - 1035115: Update product id certs (alikins@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-4
changelog:
  - 1030378: Latest strings from zanata. (alikins@redhat.com)
  - 1070737: correct config section for ca_cert_dir (ckozak@redhat.com)
  - Use systemd RPM macros to make life easier. (awood@redhat.com)


author: ckozak <ckozak@redhat.com> 1.10.14-5
changelog:
  - 1070908: Don't count cpus without topo for lpar (alikins@redhat.com)
  - 865702: Dont render exc messages with bogus markup (alikins@redhat.com)
  - 1074568: Use our translations in optparser (ckozak@redhat.com)
  - 1075167: Avoid using injected values in migrate-classic-to-rhsm
    (ckozak@redhat.com)
  - 1020474: Strings are 100% translated again. (alikins@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.2-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - Bump python-rhsm requirement to 1.20.2 (khowell@redhat.com)
  - 1448313: Do not log error, when rhsm_icon.json does not exist
    (jhnidek@redhat.com)
  - 1354667: Better message for proxy/identity cert issue (wpoteat@redhat.com)
  - 1489917: More robust reading of yum plugin file (jhnidek@redhat.com)
  - 1491842: Add man page doc for [rhsm] auto_enable_yum_plugins
    (jhnidek@redhat.com)
  - 1493711: Fix --matches option for the list command. (awood@redhat.com)
  - 1476817: Set network.ipv4_address properly, when DNS misconfigured.
    (jhnidek@redhat.com)
  - 1483746: Force UTF-8 encoding in rhsm-service (jhnidek@redhat.com)
  - rename RepoFile to YumRepoFile (dellweg@atix.de)
  - 1466453: [RFE] rhn-migrate-classic-to-rhsm auto-enable yum plugins
    (jhnidek@redhat.com)
  - D-Bus service for removing entitlements (all/ID/serial num.)
    (jhnidek@redhat.com)
  - 1489917: More robust reading of yum plugin file (jhnidek@redhat.com)
  - 1489877: minor typo in /etc/rhsm/rhsm.conf comment (jhnidek@redhat.com)
  - restructure RepoFile hierarchy (dellweg@atix.de)
  - 1319927: [RFE] sub-man automatically enables yum plugins (jhnidek@redhat.com)
  - Fix polymorphy for RHSMLogHandler (dellweg@atix.de)
  - 1481384: Do not update redhat.repo at RateLimitExceededException
    (jhnidek@redhat.com)
  - 1485008: subman register --type="RHUI" should work (jhnidek@redhat.com)
  - 1481384: Do not update redhat.repo at RateLimitExceededException (#1685)
    (jhnidek@redhat.com)
  - Do not attempt to register if already registered. (awood@redhat.com)
  - Integrate registration service into RegisterCommand. (awood@redhat.com)
  - 1480659: Properly initialize clean repo copy (khowell@redhat.com)
  - D-Bus service for unregistering system (#1680) (jhnidek@redhat.com)
  - Add an entitlement service and use it in the CLI and DBus. (awood@redhat.com)
  - Remove unneeded plugin conduit. (awood@redhat.com)
  - Clean up imports in dbus.base_object (awood@redhat.com)
  - Move certificate persistence into register service itself. (awood@redhat.com)
  - 1480395: Force UTF-8 encoding in daemons (khowell@redhat.com)
  - 1464571: 'sub-man release' prints error for more prod. certs.
    (jhnidek@redhat.com)
  - 1400326: Better error print, when consumer cert is corrupted
    (jhnidek@redhat.com)
  - Reload identity after registering. (awood@redhat.com)
  - Move registration code to a distinct service. (awood@redhat.com)
  - The get_installed_product_status() is now method of InstalledProducts, small
    changes, refactoring. (jhnidek@redhat.com)
  - D-Bus service for listing installed products (jhnidek@redhat.com)
  - 1461003: Deprecate --type option on register command (wpoteat@redhat.com)
  - 1462928: Reset status after connection validation (khowell@redhat.com)
  - 1330036: Better status error message for initial-setup (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.3-1
changelog:
  - Cockpit: Implement modal dialog (khowell@redhat.com)
  - Implement bootstrap-select component (khowell@redhat.com)
  - Port cockpit subscriptions-client to dbus (khowell@redhat.com)
  - Move python-rhsm build into subscription-manager (khowell@redhat.com)
  - 1354667: Add identity cert detection to proxy error message generation
    (wpoteat@redhat.com)
  - 1501889: Enable yum plugins after sub-man subcommand is executed
    (jhnidek@redhat.com)
  - 1477958: Use inotify for checking changes of consumer certs
    (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.5-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - Cockpit - listing of installed products using patternfly-react
    (jhnidek@redhat.com)
  - 1508457: Bump versions in python-rhsm obsoletes (khowell@redhat.com)
  - Implement fallback for settimeout on old m2crypto (khowell@redhat.com)
  - Cockpit: reconcile translated strings (khowell@redhat.com)
  - Cockpit: use translations from root dir (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.6-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - 1514067: Call virt-what using absolute path (jhnidek@redhat.com)
  - 1487688: Load config settings for cockpit plugin (khowell@redhat.com)
  - Added dependencies to cockpit-bridge and cockpit-shell. (jhnidek@redhat.com)
  - 1462456: Flush stdout and stderr on more places (jhnidek@redhat.com)
  - 1491842: fixed typo in man page. (jhnidek@redhat.com)
  - 1508591: Removed python-rhsm from subscription-manager version
    (jhnidek@redhat.com)
  - 1421010: Subman-GUI shows error dialog (wrong proxy settings)
    (jhnidek@redhat.com)
  - 1500106: subscription-manager status --ondate do not ignore date
    (jhnidek@redhat.com)
  - 1506970: Fixed default custom URL in cockpit plugin (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.8-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - Add parameter to D-Bus API to pass locale for localization of errors
    (jhnidek@redhat.com)
  - 1463765: Fix wrong Indic-language translations (khowell@redhat.com)
  - 1487600: Cockpit - Save configuration from register dialog
    (jhnidek@redhat.com)
  - 1464571: Improve multiple product certs errors (khowell@redhat.com)
  - Replace cockpit-subscriptions (khowell@redhat.com)
  - 1507158: Provide Host: in http CONNECT header (jhnidek@redhat.com)
  - 1319927: Remove newline from auto enable message (khowell@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.9-1
changelog:
  - Sync zanata translations (khowell@redhat.com)
  - 1510727: Enable starting of subman GUI, when consumer has been deleted
    (jhnidek@redhat.com)
  - 1304056: Fix D-Bus path of com.redhat.RHSM1.Facts (jhnidek@redhat.com)


author: Kevin Howell <khowell@redhat.com> 1.20.10-1
changelog:
  - Update translations from zanata (khowell@redhat.com)
  - 1510024: Handle rhel-alt product tags properly (khowell@redhat.com)
  - 1526622: Do not delete product certificates in protected directory
    (jhnidek@redhat.com)
  - 1527813: subman-gui use new URL of Online Documentation (jhnidek@redhat.com)
  - 1519512: Handle non-UTF8 RPM vendors (khowell@redhat.com)
  - 1526385: Bug fix of autoregistration in subman--cockpit plugin
    (jhnidek@redhat.com)
  - 1527392: Clear credential data in register dialog (jhnidek@redhat.com)
  - 1526385: Fix registration success detection (khowell@redhat.com)
  - 1448313: Do not log error, when rhsmcertd is restarted (jhnidek@redhat.com)
  - 1516439: Cockpit reports error during unregister when candlepin unavailable
    (jhnidek@redhat.com)


author: Vritant Jain <vrjain@redhat.com> 2.0.30-1
changelog:
  - 1333545, 1328609, 1349533, 1349584, 1264470, 1349538, 1349592, 1354653,
    1354655: more migration data for RHEL7.3 (vrjain@redhat.com)


author: Vritant Jain <vrjain@redhat.com> 2.0.31-1
changelog:
  - 1366747: channel-cert-mapping.txt does NOT account for RHN base channel rhel-
    ppc64le-server-7 (vrjain@redhat.com)


author: Vritant Jain <adarshvritant@gmail.com> 2.0.32-1
changelog:
  - 1385446: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 6.9 (adarshvritant@gmail.com)
  - Added releaser for 6.9 (adarshvritant@gmail.com)


author: Vritant Jain <adarshvritant@gmail.com> 2.0.33-1
changelog:
  - 1385446: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 6.9 (adarshvritant@gmail.com)


author: Vritant Jain <adarshvritant@gmail.com> 2.0.34-1
changelog:
  - 1286842: rhel-x86_64-server-6-rh-gluster-3-samba-debuginfo channel mapping
    (adarshvritant@gmail.com)


author: Kevin Howell <khowell@redhat.com> 2.0.35-1
changelog:
  - 1427901: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 7.4 (khowell@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 2.0.38-1
changelog:
  - 1510200: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 7.5 (csnyder@redhat.com)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.23-10.2
changelog:
  - RHEL 7.9.Z ERRATUM
  - defaults use_pty plus SELinux ROLE in user specification breaks terminal
    Resolves: rhbz#1972820


author: Radovan Sroka <rsroka@redhat.com> - 1.8.23-10.3
changelog:
  - RHEL 7.9.Z ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
    Resolves: rhbz#2161222


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 1.8.23-10.3.tuxcare.els3
changelog:
  - CVE-2025-32462: fix privilege escalation vulnerability by restricting
    unauthorized users from gaining elevated system privileges via the Sudo host
    option


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 1.8.23-10.0.1.3.tuxcare.els2
changelog:
  - CVE-2021-23239: fix potential directory existence info leak in sudoedit
  - CVE-2023-28486: escape control characters in log messages
  - CVE-2023-28487: escape control characters in sudoreplay output


author: Viktor Borzov <vborzov@cloudlinux.com> - 1.8.23-10.0.1.3.tuxcare.els3
changelog:
  - CVE-2026-35535: make privilege change before running the mailer fatal to prevent privilege escalation


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
changelog:
  - RHEL 7.5 erratum
  - Fixed sudo -l checking results whether user should be authenticated
  - Enabled LDAP filter patch
  - Fixed double free in sssd

    Resolves: rhbz#1505409
    Resolves: rhbz#1511850
    Resolves: rhbz#1518104


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
    Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
    Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?


author: Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
changelog:
  - RHEL-7.6 erratum
    Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
    Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
    Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets


author: Radovan Sroka <rsroka@redhat.com> 1.8.23-4
changelog:
  - RHEL-7.7 erratum
    Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
    Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-5
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries


author: Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-6
changelog:
  - RHEL-7.8 erratum
    Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations


author: Radovan Sroka <rsroka@redhat.com> - 1.8.23-10.3
changelog:
  RHEL 7.9.Z ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161222


author: Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
changelog:
  - RHEL 7.4 erratum
  - removed patch for output truncation (1454571) which introduced regression
    Resolves: rhbz#1360687


author: Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
changelog:
  - RHEL 7.5 erratum
  - Fixed exit codes for `sudo -l -U <user>`
  - Fixed truncated output when log_output is enabled
  - Updated use_pty and IO logging manpage

    Resolves: rhbz#1458696
    Resolves: rhbz#1454571
    Resolves: rhbz#1490358

  - Fixed second pass LDAP filter expression in the sudoers ldap backend
    - inclomplete patch for rhbz#1485397


author: Jakub Jelen <jjelen@redhat.com> - 1.8.19p2-8
changelog:
  - RHEL 7.4 erratum
  - Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
    Resolves: rhbz#1455402


author: Nils Philippsen <nils@redhat.com> - 4.0.2-10
changelog:
  - ship licenses as documentation in the base package (#1019315)
  - hardlink duplicate documentation/license files


author: Richard W.M. Jones <rjones@redhat.com> - 1:3.21-2
changelog:
  - Add upstream patch to drop supplemental groups (RHBZ#902476).
  - Remove 'Group:' RPM headers which are no longer necessary.
  - Remove some commented-out requirements.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-1
changelog:
  - New upstream version 4.1.1.
  - The program has been renamed 'supermin' from 'febootstrap'.
  - Obsolete, but don't Provide because supermin is not a compatible replacement.
  - Use '_isa' to specify architecture of supermin-helper subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-2
changelog:
  - Add upstream patch to ignore ghost non-regular files.
  - This fixes builds on Fedora 20 because the filesystem package has
    been changed so /var/lock and /var/run are marked as ghost.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.3-1
changelog:
  - New upstream version 4.1.3.
  - Remove patch which is now upstream.
  - Add examples directory to documentation.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
  - Completely remove dependency on prelink/execstack (RHBZ#1093261).
  - Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - Rebase to supermin 5.1.15.
    resolves: rhbz#1271255
  - Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.19-1
changelog:
  - Rebase to supermin 5.1.19.
  - Build on s390x.
  - Add upstream signature.
  - Remove upstream patches.
    resolves: rhbz#1484890, rhbz#1484973


author: Rich Megginson <richm@stanfordalumni.org> - 4.0.4-1
changelog:
  - Removed some autoconf generated files which were GPL only - all
  - code needs to be tri-licensed
  - updated version to 4.0.4
  - added empty COPYING file - do not use the one generated by autoreconf
  - use bz2 for source tarball instead of gz


author: Noriko Hosoi <nhosoi@redhat.com> - 4.1.0-1
changelog:
  - release 4.1.0-1
  - Resolves: Bug 1324983 - Rebase: svrcore
              Added systemd ask password support (DS 48450)


author: Adam Tkac <atkac redhat com> 2.0.7-2
changelog:
  - fix generating of python3 wrappers (#830660)
  - don't crash when attepmting to warn about wrong descructor (#830249)


author: Adam Tkac <atkac redhat com> 2.0.8-1
changelog:
  - update to 2.0.8 (#851364)
  - swig207-rh830660.patch merged
  - swig207-r13128.patch merged
  - swig-rh841245.patch merged


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.0.10-1
changelog:
  - Update to 2.0.10
  - swig203-rh706140.patch merged
  - swig204-rh752054.patch merged
  - Create swig-2.0.10-Fix-x390-build.patch


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: mpluskal@suse.com
changelog:
  - Update to 0.6.0
    * Full support to Kubernetes, even when saving events to a trace
      file
    * semget system event
    * access system event
    * Automatically build sysdig-probe for boot2docker releases
    * Properly filter process table serialization in a trace file
      when a process filter is used
    * Some csysdig actions now ask the user for confirmation
    * various bugfixes
    * drop GH_496_fix.patch


author: aspiers@suse.com
changelog:
  - Fix whitespace issues in .spec and .changes files
  - Remove duplicate %{_datadir} directory from %files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.05-2
changelog:
  - Remove old Obsoletes/Provides for syslinux-devel as such a subpkg
    was introduced with 3.83-2 (#756733).


author: Peter Jones <pjones@redhat.com> - 4.05-4
changelog:
  - Fix build problem from kernel-headers' removeal of ext2_fs.h
    (fix backported from as-yet-unreleased upstream version.)


author: Peter Jones <pjones@redhat.com> - 4.05-12
changelog:
  - Toolchain changes between when this originally got built and 4.05-9 means
    4.05-9 - 4.05-11 don't actually work.
    Related: rhbz#1085434


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-8
changelog:
  - resolves: #846699
    renamed nfsiostat to nfsiostat-sysstat, as nfsiostat is also provided
    by the nfs-utils package
  - resolves: #1224882
    fixed bug when pidstat could run out of pre-allocated space for PIDs
  - resolves: #1258990
    added support for more CPUs
  - resolves: #1267972
    fixed bug when iostat didn't display the full device name if it's too long
  - resolves: #1328490
    fixed bug, when sadc could forward SIGINIT to init process and couse reboot


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.5-9
changelog:
  - related: #846699
    do the renaming of nfsiostat properly, with patch
  - resolves: #1332662
    added tapestat utility for monitoring tape drives


author: Michal Sekletár <msekleta@redhat.com> - 10.1.5-18
changelog:
  - add -f flag to force fdatasync() after sa file update (#1662094)
  - don't call filesystem count functions when we are not collecting fs statistics (#1670060)
  - skip autofs when gathering filesystem statistics (#1670060)
  - fix use of incorrect preposition in sar man page (#1624410)
  - fix CPU usage reporting (#1618688)


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 10.1.5-20.tuxcare.els1
changelog:
  - CVE-2022-39377: check an overflow and exit if it be
  - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for
    CVE-2022-39377


author: Nils Philippsen <nils@redhat.com> - 1.10.0-1
changelog:
  - use pkexec instead of consolehelper
  - read/write /etc/localtime as symbolic link and only fall back to using
    /etc/sysconfig/clock if it is present (#824033)


author: Nils Philippsen <nils@redhat.com> - 1.10.1-1
changelog:
  - don't trip over missing /etc/sysconfig/network file (#857412)
  - pull updated translations
  - install and use timezone translations properly


author: Nils Philippsen <nils@redhat.com> - 1.10.5-1
changelog:
  - pull updated and new translations (#878319)
  - catch (rare) errors from fork()
  - catch unavailable display (#766936)
  - pull updated time zones


author: Jan Synáček <jsynacek@redhat.com> - 1.10.6-3
changelog:
  - remove invalid source links (#1502430)
  - system-config-date can't enable ntp because /bin/systemd doesn't exist (#1381321)


author: Thomas Woerner <twoerner@redhat.com> 1.2.28-1
changelog:
  - added firewalld check to prevent usage of s-c-fw if firewalld is running
  - fixed gtk_label_autowrap not to change alignments
  - fixed port of libvirt-tls (rhbz#565625)
  - fixed requirement for newt-python (was newt before)
  - return -2 for ports > 65535 in fw_functions.getPortID for better port error
    reporting
  - hide dialogs before going on (rhbz#643966)
  - updated translations: ca, de, he, hi, ja, nb, pa, pt, sk, sv, ta, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Roman Rakus <rrakus@redhat.com> - 2.0.10-3
changelog:
  - Use kdumpctl and systemctl instead of service command
  - Default action changed so accordingly change also our message
  - Configuration for nfs and ssh changed
    Resolves: #886321,#883769,#883638


author: Martin Milata <mmilata@redhat.com> - 2.0.13-1
changelog:
  - Update to 2.0.13
  - New version incorporates several bugfixes and adds support for x86 EFI
    systems


author: Martin Milata <mmilata@redhat.com> - 2.0.13-5
changelog:
  - Fix broken Reload button
  - Resolves: #1052042
  - Update default core_collector to use LZO compression
  - Resolves: #1047816


author: Martin Milata <mmilata@redhat.com> - 2.0.13-9
changelog:
  - Set PATH in backend so that zipl knows where to find dmsetup (affects only s390x)
  - Resolves: #1077113


author: Than Ngo <than@redhat.com> - 2.0.13-17
changelog:
  - Resolves: bz#1258363 - gtkWarning showing in terminal while launch kdump
  - Resolves: bz#1279298 - system-config-kdump throws traceback on keyboard interruption
  - Resolves: bz#1082420 - error display Basic Settings option "Current kdkump Memory" value
  - Resolves: bz#1077470 - target settings option "Raw device" does not list VirtIO devices
  - Resolves: bz#1384943 - add fadump memory reservation support in system-config-kdump (fadump)
  - Resolves: bz#1404780 - add support variable amount of memory as crashkernel value


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-11
changelog:
  - Add dependency on newt-python (#845391, Sandro Mani).
  - Fix bogus dates in %changelog and rpmlint tabs vs spaces warning.


author: Nils Philippsen <nils@redhat.com> - 1.3.1-12
changelog:
  - use consistent names for patches, create backup files
  - use polkit/pkexec instead of consolehelper
  - add man page


author: Nils Philippsen <nils@redhat.com> - 1.4.0-1
changelog:
  - version 1.4.0
  - remove ancient obsoletes and bogus requirements
  - require systemd >= 30 for localed
  - update gtk-update-icon-cache scriptlets


author: Chris Lumens <clumens@redhat.com> - 2.8.7-1
changelog:
  - pykickstart raises KickstartError instead of IOError now. (clumens)
  - Clear the partition store whenever a file is loaded (#610740). (clumens)
  - Remove the key entry as well, since that command no longer exists. (clumens)
  - Remove the deprecated interactive mode. (clumens)
  - anaconda has changed all around, so fix the GroupSelector import. (clumens)
  - Fix --help argument handling (#621379). (clumens)
  - Update translation files (#617075). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.8-1
changelog:
  - Fix an importing bug caused by the previous patch. (clumens)
  - Don't traceback when starting up outside of X (#676338). (clumens)
  - Convert spec to UTF-8. (notting)


author: Chris Lumens <clumens@redhat.com> - 2.8.9-1
changelog:
  - Put /usr/share/system-config-kickstart at the front of the path (#820748). (clumens)
  - Fix "make local" to not pack up .git/ as well. (clumens)
  - Update Makefiles to work with new translation system. (clumens)
  - BuildRequires transifex-client. (clumens)
  - Ignore po/*.po files. (clumens)
  - Remove translation files. (clumens)
  - Fix translation files so "msgfmt -c " passes and they'll upload to transifex. (clumens)
  - Add transifex configuration file. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.10-1
changelog:
  - Update glade file to fix translation building. (clumens)
  - Fix various problems when packaging up translations. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.0-1
changelog:
  - Fix another problem updating the .po file.
  - Remove support for python-meh.  It requires gtk3.
  - Add the old anaconda GroupSelector.py to system-config-kickstart (#859928).
  - It helps to import the exceptions I want to catch (#893282).
  - Do @VERSION@ substitution on the main program, too (#866563).


author: Chris Lumens <clumens@redhat.com> - 2.9.1-1
changelog:
  - Fix an error reading the timezone in generate mode (#916346, #924764). (clumens)
  - Remove the documentation (#915737). (clumens)
  - Display hidden groups in the package selection UI (#915029). (clumens)
  - Default to SHA512, same as anaconda (#915013). (clumens)
  - Add the system-config-keyboard dep back in (#909355). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.9.2-1
changelog:
  - Transifex has moved, so update the config. (clumens)
  - Remove the Japanese-specific man page. (clumens)
  - Update the system-config-kickstart man page to something useful (#948447). (clumens)
  - Fix a typo. (clumens)


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24
changelog:
  - Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua localization to the package


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
  - Resolves:rh#1040298 - OK button should be disabled always for the default selected language
  - Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
  - Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Tim Waugh <twaugh@redhat.com> 1.4.1-6
changelog:
  - Use the right signal for spotting when editing is done when renaming
    a printer (bug #971404).
  - More fixes for UTF-8 encoding issues (bug #968142).
  - Fixed new printer dialog traceback (bug #969916).


author: Tim Waugh <twaugh@redhat.com> 1.4.1-8
changelog:
  - Fixed misplaced parenthesis (bug #979119).
  - Fixed another codec issue (bug #978970).
  - Avoid race when renaming printer (bug #975705).
  - Don't check for missing drivers in remote printers (bug #975058)
  - Another fix from the move to gi.repository (bug #973662).
  - Fixed another codec issue (bug #971973).


author: Tim Waugh <twaugh@redhat.com> 1.4.1-17
changelog:
  - Applied upstream patch to fix job retrieval (bug #1119227).
  - Applied upstream patch to fix Gdk.color traceback (bug #1112334).


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.4.1-20
changelog:
  - 1145739 - cannot add samba printer without python-smbc
  - 1203219 - Tracebacks due to selection/cursor handling
  - 1296815 - system-config-printer should require gtk3 instead of gtk2
  - 1164188 - ImportError: No module named cairo
  - 1140627 - Nested class are not allowed


author: Nils Philippsen <nils@redhat.com> - 1.3.4-1
changelog:
  - don't ask libuser to create a home directory over an existing one (#908852,
    patch by Miloslav Trmač)
  - correct check if SELinux is enabled


author: Lukas Czerner <lczerner@redhat.com> 0.4-2
changelog:
  - Remove btrfs resize support (#986116)
  - Unmount all btrfs subvolumes when removing a filesystem
  - Fix size argument parsing for create and snapshot command
  - Fix list output for some cases
  - Add support to create encrypted volumes with crypt backend (#1012523)
  - Add dry-run option
  - Fix removing volumes with crypt backend
  - Add raid1 and raid10 support for lvm backend (#1012518)
  - Allow to check btrfs volumes (#986105)
  - Fix error handling when trying to resize btrfs subvolume (#986111)
  - Fix ssm mount command so it detects directory properly


author: Lukas Czerner <lczerner@redhat.com> 0.4-4
changelog:
  - Suppress backtrace when a command fails (#1054349)
  - Fix ssm to recognize units in new btrfs output properly (#1052327)
  - Use correct sysfs file to get size for a partition (#1053651)
  - Fix ssm to be able add a device with signature to btrfs file system (#1053741)
  - Resognize btrfs devices from new btrfs output properly (#1052330)


author: Lukas Czerner <lczerner@redhat.com> 0.4-6
changelog:
  - Fix listing of snapshots created by yum-fs-snapshot (#1094646)
  - Provide lvm thin provisioning support (#1115131)
  - Create mount point if it does not exist (#1134983)
  - Support percentage size argumetns (#1139263)
  - Fix bug when deleting inactive lv (#1142292)
  - Fix bug when listing empty dm tables (#1113584)


author: Jan Tulak <jtulak@redhat.com> 0.4-9
changelog:
  - Fix unhandled exception for some locales set through LC_ALL (#1679591)
  - Fix ssm resize fails with python stack trace (#1654583)
  - Fix poor luks password throwing an error (#1141871)
  - Fix unable to list thinpools with the same name (#1619476)
  - Fix ssm list delay in detecting xfs growth (#1664652)
  - Fix exported lvm volumes issue
  - Send udev change events for btrfs operations and on all fs creations
  - Fix issues with partitions on loopback devices
  - Better error reporting for some situations


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.1.0-1
changelog:
  - Import system-switch-java 1.1.0.
  - Merge gui subpackage into base package.
  - Resolves: rhbz#195649


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.1.0-2
changelog:
  - Tolerate trailing newlines in alternatives file.
  - Handle Sun plugin alternative.
  - Do not use desktop-file-install.
  - Resolves: rhbz#195649


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.1.2-1
changelog:
  - Import system-switch-java 1.1.2.
  - Remove patches.
  - Resolves: rhbz#442399
  - Resolves: rhbz#404331


author: Deepak Bhole <dbhole@redhat.com> - 1.1.5-1
changelog:
  - Resolves: rhbz#663322
  - Sync with F14:
    - Update to 1.1.5 which fixes rhbz 493898 and adds more translations


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-4
changelog:
  - added jre-java patch to work corectly with java directories and not
    just with  jre  symlinks
    backward compatibility preserved
  - added correct recognition of icedtea-web plugin
  - added disabledUnderline patch
  - added tuiWidth patch
  - Resolves: rhbz#731039
  - Resolves: rhbz#725718


author: Omair Majid <omajid@redhat.com> - 1.1.5-9
changelog:
  - Remove libuser-python dependency
  - Update to work with newer alternatives
   - added new-jdk-paths.patch
   - this patch is disabled, untill more work is done in upstream
  - Resolves: rhbz#1070976


author: Jiri Vanek <jvanek@redhat.com> - 1.1.5-10
changelog:
  - Renamed (to baseurl) url macro to prevent shadowing
  - Added BSD license to list of Licenses
   - (COPYING.icon says it's a 2-clause BSD license)
  - removed buildroot definition and manual removing of it
  - Resolves: rhbz#1070976


author: Jiri Vanek <jvanek@redhat.com> - 1.1.6-1
changelog:
  - updated to upstream release of 1.1.6
  - removed all upstreamed patches
  - Resolves: rhbz#1283904
  - Resolves: rhbz#1080838


author: Jiri Vanek <jvanek@redhat.com> - 1.1.7.1-1
changelog:
  - updated to latest upstream, removed upstreamed patches
  - Resolves: rhbz#1283904
  - Resolves: rhbz#1080838


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-7
changelog:
  - setup tty permissions and group for /dev/sclp_line0 (#1070310)
  - cdrom_id: use the old MMC fallback (#1038015)
  - mount: don't send out PropertiesChanged message if actually nothing got changed (#1069718)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-8
changelog:
  - rules: mark loop device as SYSTEMD_READY=0 if no file is attached (#1067422)
  - utmp: make sure we don't write the utmp reboot record twice on each boot (#1053600)
  - rework session shutdown logic (#1047614)
  - introduce new stop protocol for unit scopes (#1064976)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-9
changelog:
  - fixes crashes in logind and systemd (#1073994)
  - run fsck before mouting root in initramfs (#1056661)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-11
changelog:
  - logind-session: save stopping flag (#1082692)
  - unit: add waiting jobs to run queue in unit_coldplug (#1083159)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 208-11.4
changelog:
  - util: reset signals when we fork off agents
  - util: fix minimal race where we might miss SIGTERMs when forking off an agent


author: Lukas Nykryn <lnykryn@redhat.com> - 208-11.6
changelog:
  - rules: don't enable usb pm for Avocent devices (#1176736)
  - core: introduce new Delegate=yes/no property controlling creation of cgroup subhierarchies (#1179715)
  - core: don't migrate PIDs for units that may contain subcgroups, do this only for leaf units (#1179715)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-43
changelog:
  - tests: use XFS as root filesystem for system tests (#1475870)
  - tests: use fdisk instead of sfdisk (#1475870)
  - Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
  - reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule


author: Lukas Nykryn <lnykryn@redhat.com> - 219-44
changelog:
  - core: unset sysfs path after transition to dead state (#1408916)
  - sysctl: fix uninitialized variable (#1485121)
  - udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)
  - compile with -Werror (#1447937)
  - myhostname: don't return any ipv6 entries when ipv6 is disabled (#1444824)
  - core:execute: fix fork() fail handling in exec_spawn() (#1437114)
  - fix compilation after commit 382877acc6c029e59e359a076d203ca03b4b9e9e (#1447937)
  - Redefine 32bit time_t format to signed (#1447937)
  - sd-bus/bus-kernel.c: fix format errors on ppc64le (#1447937)
  - tmpfiles: with "e" don't attempt to set permissions when file doesn't exist (#1445732)
  - units: introduce getty-pre.target (#6667) (#1173080)
  - units: order container and console getty units after getty-pre.target (#1173080)
  - log: never log into foreign fd #2 in PID 1 or its pre-execve() children (#1420505)
  - nspawn: new option to start as PID2 (#1417387)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-45
changelog:
  - journal: implicitly flush to var on recovery (#4028) (#1364092)
  - journal: add/use flushed_flag_is_set() helper (#4041) (#1364092)
  - journald: don't flush to /var/log/journal before we get asked to (#1364092)
  - path-util: make use of "mnt_id" field exported in /proc/self/fdinfo/<fd> (#1472439)
  - Revert "Revert "journald: allow restarting journald without losing stream connections"" (#1359939)
  - journald: make sure we retain all stream fds across restarts (#6348) (#1359939)
  - Allow systemd-tmpfiles to set the file/directory attributes (#1299714)
  - tmpfiles: rework file attribute code (#1299714)
  - tmpfiles: warn if we get an argument on lines that don't take any (#1299714)
  - tmpfiles: substitute % specifiers in arguments for writing files and xattrs (#1299714)
  - btrfs-util: introduce btrfs_is_filesystem() and make use of it where appropriate (#1299714)
  - journal: don't force FS_NOCOW_FL on new journal files, but warn if it is missing (#1299714)
  - tmpfiles: Add +C attrib to the journal files directories (#1299714)
  - Revert "path-util: make use of "mnt_id" field exported in /proc/self/fdinfo/<fd>" (#1472439)
  - device: make sure to remove all device units sharing the same sysfs path (#6679) (#1408916)
  - manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)
  - doc: document service exit codes (#1178929)
  - units: order cryptsetup-pre.target before cryptsetup.target (#1384014)
  - man: add an explicit description of _netdev to systemd.mount(5) (#1384014)
  - units: add remote-cryptsetup.target and remote-cryptsetup-pre.target (#1384014)
  - cryptsetup-generator: use remote-cryptsetup.target when _netdev is present (#1384014)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-46
changelog:
  - Support 'rdma' as a ListenNetlink= argument (#6626) (#1494610)
  - core/namespace: Protect /usr instead of /home with ProtectSystem=yes (#1493047)
  - udev: Use parent bus id for virtio disk builtin path-id (#5500) (#1496697)
  - socket-util: socket_address_parse() should not log errors on its own (#1497639)
  - test: fix failing test-socket-util when running with ipv6.disable=1 kernel param (#1497639)
  - scsi_id: add missing options to getopt_long() (#6501) (#1476910)
  - unmount: Pass in mount options when remounting read-only (#1312002)
  - shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
  - shutdown: fix incorrect fscanf() result check (#6806) (#1312002)
  - path-util: make use of "mnt_id" field exported in /proc/self/fdinfo/<fd> (#1472439)
  - support ranges when parsing CPUAffinity (#1493976)
  - man: Update man page documentation for CPUAffinity (#1493976)
  - test-path-util: force rm_rf (#1472439)
  - Export NVMe WWID udev attribute (#5348) (#1503253)
  - mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076) (#1437518)
  - journald: never accept fds from file systems with mandatory locking enabled (#1501017)
  - udev: builtin-keyboard: move fetching the device node up (#1500119)
  - udev: builtin-keyboard: immediately EVIOCSKEYCODE when we have a pair (#1500119)
  - udev: builtin-keyboard: move actual key mapping to a helper function (#1500119)
  - udev: builtin-keyboard: invert a condition (#1500119)
  - udev: builtin-keyboard: add support for EVDEV_ABS_* (#1500119)
  - hwdb: sync 60-evdev.hwdb from systemd v235 (rhbz#1500119)
  - journal: ensure open journals from find_journal() (#3973) (#1493846)
  - journal: only check available space when journal is open (#1493846)
  - automount: if an automount unit is masked, don't react to activation anymore (#5445) (#1498318)
  - units: add [Install] section to remote-cryptsetup.target (#1477757)
  - units: replace remote-cryptsetup-pre.target with remote-fs-pre.target (#1477757)
  - man: add a note about _netdev usage (#1477757)
  - units: make remote-cryptsetup.target also after cryptsetup-pre.target (#1477757)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-47
changelog:
  - cryptsetup-generator: use after free (#1477757)
  - manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)
  - journal-remote: make --url option support arbitrary url (#1505385)
  - journald: make maximum size of stream log lines configurable and bump it to 48K (#6838) (#1442262)
  - service: serialize information about currently executing command (#1404657,#1471230)
  - tests: add new test for issue #518 (#1404657,)
  - tests: in RHEL-7 we don't have python3 by default (#1404657,)
  - service: attempt to execute next main command only for oneshot services (#6619) (#1404657,)
  - timedatectl: stop using xstrftime (#1503942)
  - Add support to read lz4 compressed journals (rhbz#1431687)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-48
changelog:
  - journald: never block when sending messages on NOTIFY_SOCKET socket (#1511565)
  - journal: restore watchdog support (#1511565)
  - cgroup resource property setting ignored if einval (rhbz#1302305)
  - fileio: add new helper call read_line() as bounded getline() replacement (#1503106)
  - def: add new constant LONG_LINE_MAX (#1503106)
  - fileio: rework read_one_line_file() on top of read_line() (#1503106)
  - cgroup-util: replace one use of fgets() by read_line() (#1503106)
  - conf-parse: remove 4K line length limit (#1503106)
  - test-conf-parser: add tests for config parser (#1503106)
  - fileio: use _cleanup_ for FILE unlocking (#1503106)
  - test-fileio: also test read_line() with actual files (#1503106)
  - fileio: return 0 from read_one_line_file on success (#1503106)
  - man: fix description of --force in halt(8) (#7392) (#1515130)
  - journal: return better error for empty files (#1465759)
  - journalctl: continue operation, even if we run into an invalid file (#1465759)
  - journal: remove error check that never happens (#1465759)
  - sd-journal: various clean-ups and modernizations (#1465759)
  - journalctl: when we fail to open a journal file, print why (#1465759)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-50
changelog:
  - core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
  - shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
  - enable display manager only on systemd installation (#1464893)
  - remove unnecessary dependency on dracut (#1466676)
  - substitute PACKAGE_STRING with the actual package NVR (#1453153)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-52
changelog:
  - cryptsetup: when unlocking always put path to the object into Id (#1511043)
  - cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
  - cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
  - introduce naming based on phys_port_name for nfp via udev rule (#1516283)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-54
changelog:
  - automount: ack automount requests even when already mounted (#1535135)
  - udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
  - journald-native: Fix typo in MANDLOCK message (#1501017)
  - process-util: make our freeze() routine do something useful (#1540941)
  - dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
  - bus-util.c: fix TasksMax= property assignment (#1537147)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-55
changelog:
  - sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
  - core: Let two more booleans survive a daemon-reload (#1542391)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-57
changelog:
  - sd-journal: properly handle inotify queue overflow (#1540538)
  - sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
  - journalctl: Periodically call sd_journal_process in journalctl (#1540538)
  - sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-58
changelog:
  - tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
  - timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
  - doc: fix links to binfmt_misc kernel documentation (#1572244)
  - man/udevadm: remove superfluous --version from subcommand (#1553076)
  - man/udevadm: correctly show the short version of --exit (#1552712)
  - core/timer: downgrade message about random time addition (#5229) (#1587906)
  - fd-util: add new acquire_data_fd() API helper (#1446095)
  - systemd-analyze: make dump work for large # of units (#1446095)
  - use max. message size allowed by DBus spec (#8936) (#1446095)
  - cryptsetup: support LUKS2 on-disk format (#1573838)
  - units: don't put udev to its own mount namespace with slave propagation (#1432211)
  - rules: disable support for Lenovo IR cameras (#1540418)
  - core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
  - core: fix confusing logging of instantaneous jobs (#1506256)
  - core: correct return value from reload methods (#1506256)
  - core: always try harder to get unit status message format string (#1506256)
  - core: unit_get_status_message_format() never returns NULL (#1506256)
  - core: try harder to get job completion messages too (#1506256)
  - core: remove generic job completion messages from unit vtables (#1506256)
  - core: do not log done failed-condition jobs as if unit started (#1506256)
  - core: log completion of remaining job types (#1506256)
  - core: adjust job completion message log levels (#1506256)
  - mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
  - rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
  - umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
  - core: Implement timeout based umount/remount limit (#1571098)
  - core: Implement sync_with_progress() (#1571098)
  - journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
  - tmpfiles: use safe_glob() (#1436004)
  - core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-59
changelog:
  - man: correct the meaning of TimeoutStopSec= (#1305509)
  - rules: mark hotplugged memory as movable (#1563532)
  - udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
  - rules: disable support for Dell IR cameras (#1591316)
  - rpm: fix 
  if [ $1 -eq 1 ] ; then 
                  systemctl preset  >/dev/null 2>&1 || : 
  fi 
  () macro. (#1582383)
  - rpm: remove confusing --user before --global (#1582383)
  - automount: handle state changes of the corresponding mount unit correctly (#1596241)
  - man: document that SIGCONT always follows SIGTERM (#1601794)
  - rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-60
changelog:
  - Revert "rules: mark hotplugged memory as movable" (#1614686)
  - rules: implement new memory hotplug policy (#1614686)
  - Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-62
changelog:
  - cryptsetup-generator: introduce basic keydev support (#1619743)
  - cryptsetup-generator: don't return error if target directory already exists (#1619743)
  - cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
  - Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-59
changelog:
  - man: correct the meaning of TimeoutStopSec= (#1305509)
  - rules: mark hotplugged memory as movable (#1563532)
  - udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
  - rules: disable support for Dell IR cameras (#1591316)
  - rpm: fix 
  if [ $1 -eq 1 ] ; then 
                  systemctl preset \--global  >/dev/null 2>&1 || : 
  fi 
  () macro. (#1582383)
  - rpm: remove confusing --user before --global (#1582383)
  - automount: handle state changes of the corresponding mount unit correctly (#1596241)
  - man: document that SIGCONT always follows SIGTERM (#1601794)
  - rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-63
changelog:
  - dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)
  - journald: do not store the iovec entry for process commandline on stack (#1657788)
  - journald: set a limit on the number of fields (1k) (#1657792)
  - journal-remote: set a limit on the number of fields in a message (#1657792)
  - journald: free cmdline buffers owned by iovec (#1666646)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-64
changelog:
  - detect-virt: do not try to read all of /proc/cpuinfo (#1631531)
  - core: disable the effect of Restart= if there's a stop job pending for a service (#6581) (#1626382)
  - networkd: respect DHCP UseRoutes option (#1663365)
  - networkd: fix dhcp4 link without routes not being considered ready (#8728) (#1663365)
  - networkd: dont crash when mtu changes (#6594) (#1663365)
  - tmpfiles: "e" takes globs (#1641764)
  - tmpfiles: 'e' is supposed to operate on directory only (#1641764)
  - tmpfiles: 'e' is supposed to accept shell-style globs (#1641764)
  - bus-message: do not crash on message with a string of zero length (#1643396)
  - Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)
  - set automount state to waiting when the mount is stopped (#1651257)
  - core: when deserializing state always use read_line(…, LONG_LINE_MAX, …) (CVE-2018-15686)
  - shorten hostname before checking for trailing dot (#1631625)
  - journald: fixed assertion failure when system journal rotation fails (#9893) (#1619543)
  - local-addresses: handle gracefully if routes lack an RTA_OIF attribute (#1627750)
  - rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1666612)
  - 6647 - use path_startswith("/dev") in cryptsetup (#6732) (#1664695)
  - core: mount-setup: handle non-existing mountpoints gracefully (#1585411)
  - units/rescue.service.in: fix announcement message (#1660422)
  - systemctl: Allow 'edit' and 'cat' on unloaded units (#1649518)
  - main: improve RLIMIT_NOFILE handling (#5795) (#1585913)
  - shared/sleep-config: exclude zram devices from hibernation candidates (#1609816)
  - journalctl: allow --file/--directory with --boot or --list-boots (#1463678)
  - journalct: allow --boot=0 to DTRT with --file/--directory (#1463678)
  - journal-remote: show error message if output file name does not end with .journal (bz#1267552)
  - artificially serialize building of .policy files (#1272485)
  - cryptsetup: add support for sector-size= option (#9936) (#1571801)
  - cryptsetup: do not define arg_sector_size if libgcrypt is v1.x (#9990) (#1571801)
  - journal: fix syslog_parse_identifier() (#1657794)
  - journal: do not remove multiple spaces after identifier in syslog message (#1657794)
  - tmpfiles: change ownership of symlinks too (#1620110)
  - tmpfiles: fix check for figuring out whether to call chmod() (#1620110)
  - shared/install: allow "enable" on linked unit files (#1628575)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-65
changelog:
  - backport fd_is_fs_type (#1663143)
  - backport chase_symlinks (#1663143)
  - fs-util: add new CHASE_SAFE flag to chase_symlinks() (#1663143)
  - fs-util: add new chase_symlinks() flag CHASE_OPEN (#1663143)
  - sd-dameon: also sent ucred when our UID differs from EUID (#1663143)
  - notify: add new --uid= command (#1663143)
  - core: be stricter when handling PID files and MAINPID sd_notify() messages (#1663143)
  - journald: respect KeepFree= as well as MaxUse= values (#1361893)
  - shutdown: in_container was used before its definition (#1693716)
  - core: Fix edge case when processing /proc/self/mountinfo (#1691511)
  - sd-bus: deal with cookie overruns (#1693559)
  - Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667871)
  - Allocate temporary strings to hold dbus paths on the heap (#1667871)
  - sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)
  - udev: check if the spawned PID didn't exit after reaping unexpected PID (#1697909)
  - udev: call poll() again after killing the spawned process (#1697909)
  - udev: check age against both timeouts to prevent integer wraparound (#1697909)
  - avoid possible hang if our child process hangs (#1697909)
  - missing: when adding syscall replacements, use different names (#1694605)
  - include sys/sysmacros.h in more places (#1694605)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-66
changelog:
  - sd-bus: unify three code-paths which free struct bus_container (#1643394)
  - hashmap: don't use mempool (#1609349)
  - man: be more explicit about thread safety of sd_journal (#1609349)
  - selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit (#1240730)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-67.1
changelog:
  - return error value on failure (#1729226)
  - revert local changes made during backport of the test (#1729226)
  - core/timer: Prevent timer looping when unit cannot start (#1729230)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1729228)
  - core: rerun GC logic for a unit that loses a reference (#1729228)
  - pid1: rename unit_check_gc to unit_may_gc (#1729228)
  - pid1: include the source unit in UnitRef (#1729228)
  - pid1: fix collection of cycles of units which reference one another (#1729228)
  - pid1: free basic unit information at the very end, before freeing the unit (#1729228)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1729228)
  - service: relax PID file symlink chain checks a bit (#8133) (#1729414)
  - path-util: fix more path_is_mount e792e890f fallout (#1279231)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-69
changelog:
  - revert local changes made during backport of the test (#1726785)
  - core: add a "Requires=" dependency between units and the slices they are located in (#1718953)
  - core: rerun GC logic for a unit that loses a reference (#1718953)
  - pid1: rename unit_check_gc to unit_may_gc (#1718953)
  - pid1: include the source unit in UnitRef (#1718953)
  - pid1: fix collection of cycles of units which reference one another (#1718953)
  - pid1: free basic unit information at the very end, before freeing the unit (#1718953)
  - pid1: properly remove references to the unit from gc queue during final cleanup (#1718953)
  - core/timer: Prevent timer looping when unit cannot start (#1710302)
  - service: relax PID file symlink chain checks a bit (#8133) (#1724420)


author: Lukas Nykryn <lnykryn@redhat.com> - 219-70
changelog:
  - udev-rules: Add rule for /dev/kfd (#1659516)
  - core: exclude .slice units from "systemctl isolate" (#1745199)
  - udev/scsi_id: fix incorrect page length when get device identification VPD page (#1635945)
  - core: when determining whether a process exit status is clean, consider whether it is a command or a daemon (#1560417)
  - units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (#1560417)
  - units: make sure initrd-cleanup.service terminates before switching to rootfs (#1560417)
  - core: tiny tweak for cgroup trimming during manager_free() (#1630378)
  - process: an empty environment block should be returned as such (#1685648)
  - core: make sure initrd-switch-root command survives PID1's killing spree (#4730) (#1754053)
  - systemctl: always avoid being killed when doing switch-root (#1754053)
  - units: drop KillMode= from initrd-switch-root.service (#1754053)
  - systemctl: ignore SIGTERM after switch root (#1754053)
  - units: restore Before dependencies for systemd-vconsole-setup.service (#1754053)
  - core: reduce the number of stalled PIDs from the watched processes list when possible (#1501796)
  - timedate: use gmtime_r() and localtime_r() (#1694605)
  - sd-bus: stop using the result of an assignment as an operand of && (#1694605)
  - journal-upload: add asserts that snprintf does not return an error (#1694605)
  - analyze: actually select longest activated-time of services (#1694605)
  - pid1: remove unnecessary error reassignment (#1694605)
  - core: drop unnecessary condition (#1694605)
  - import: drop unnecessary condition (#1694605)
  - journal-verify: add comment and silence LGTM warning (#1694605)
  - journal: drop redundant condition (#1694605)
  - lldp: set correct state for processing (#1694605)
  - sd-bus: fix implicit downcast of bitfield reported by LGTM (#1694605)
  - tree-wide: use 'signed int' instead of 'int' for bit field variables (#1694605)
  - machinectl: check correct FD for a return value (#1694605)
  - shared/install: avoid overwriting 'r' counter with a partial result (#1694605)
  - systemctl: set_put() can't return (-)EEXIST (#1694605)
  - systemctl: remove dead check (#1694605)
  - journal-gateway: explicitly declare local variables (#1694605)
  - journal-gateway: use localStorage["cursor"] only when it has valid value (#1694605)
  - lgtm: ignore files dropped in upstream (#1694605)
  - lgtm: suppress several constant comparisons (#1694605)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-73.4
changelog:
  - mount: don't propagate errors from mount_setup_unit() further up (#1809159)
  - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1809159)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-73.5
changelog:
  - core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1810576)
  - core: rework StopWhenUnneeded= logic (#1810576)
  - fix the fix for #1691511 (#1809159)


author: Frank Ch. Eigler <fche@redhat.com> - 3.2-3
changelog:
  - rhbz1506230 (netif_receive_skb_internal probing)
  - rhbz1490862 (f2fs tracepoint header workarounds)


author: Frank Ch. Eigler <fche@redhat.com> - 3.3-2
changelog:
  - Enable BPF build (rhbz1544689, rhbz1311586) (x86-64 only)
  - Fix vfs.add_to_page_cache probe (rhbz1547238)
  - Fix foreach_limit.exp compilability (rhbz1591267)


author: Serhei Makarov <smakarov@redhat.com> - 3.3-3
changelog:
  - Add BPF left-operand fix (rhbz1560044) (x86-64 only)
  - Add stap.1 note on missing stapbpf.8 (rhbz1560044)
  - Fix RHEL-ALT build (rhbz1544689)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-9
changelog:
  - Add patch to fix CVE-2010-2642, CVE-2011-0433 (afm-fix patch)
  - New version of patch for CVE-2011-0764, also fixes CVE-2011-1552,
    CVE-2011-1553, CVE-2011-1554 (type1-inv-rw-fix patch)
    Resolves: rhbz#772899
  - Add explicit NVR requires to apps subpackage (consumes libt1(x).so)
  - Fix rpmlint warning (mixed-use-of-spaces-and-tabs)


author: Rex Dieter <rdieter@fedoraproject.org> 1.8-1
changelog:
  - taglib-1.8

  -* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.2-2
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: gil cattaneo <puntogil@libero.it> 0:1.2.1-1
changelog:
  - Upgraded to 1.2.1
  - remove ant-nodeps reference
  - changed group in javadoc sub package (from Development/Documentation in Documentation)
  - add maven metadata
  - add manual
  - Adapt to current guidelines.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-37
changelog:
  - Improve message with response directions to reflect new option
    for user names with dot character


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-42
changelog:
  - Add systemd support (thanks to Zbigniew Jędrzejewski-Szmek and Jóhann B. Guðmundsson)
    Resolves: #737219


author: Nathaniel McCallum <npmccallum@redhat.com> - 4-1
changelog:
  - Import SRPM from Fedora (tang-4-3.fc26)
  - Remove nagios dependency
  - Adjust http-parser version for RHEL


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-20
changelog:
  - allow extracting single volume from multi-volume archive (#919897)
  - usrmove: /bin/tar ~> /usr/bin/tar, selinux handling edit


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-21
changelog:
  - enable build for arm64 (#926610)
  - silence gcc warnings (lint fixes without risk from upstream) for RPMDiff


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-23
changelog:
  - use /usr/bin/ssh as the default remote shell binary (#969015)
  - do not verbose-print xattrs when --no-xattrs option is used
  - do not override the config.{guess,sub} twice, this is already done by the
    redhat-rpm-config package (#951442)


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-25
changelog:
  - the /etc/rmt seems to be the best place where to look for rmt binary (see the
    commit message in Fedora's cpio.git for more info)


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Maurizio Lombardi <mlombard@redhat.com> - 2.1.fb46-4
changelog:
  - Properly detect errors when writing backup files. (Closes: #80) (#81)
  - Read number of backup files to keep from file
  - config: defend on '/etc/target/backup' directory
  - config: backup when current config is different from recent backup copy
  - config: rename key 'kept_backups' as 'max_backup_files'
  - backup: global option to tune max no. of backup conf files


author: Andy Grover <agrover@redhat.com> - 0.3.1-5
changelog:
  - Update require-password.patch
  - Change target.yaml to not include a commented-out default password


author: Andy Grover <agrover@redhat.com> 0.6.1-1
changelog:
  - Update to latest version, make needed changes
  - Drop patches:
    * require-password.patch
    * use-std-ssl.patch
  - Change requires from python-lvm to lvm2-python-libs


author: Petr Machata <pmachata@redhat.com> - 4.0-4.20120408
changelog:
  - Rebase to 4.0 update 4
  - Refresh Getting_Started.pdf, Reference.pdf, Tutorial.pdf
  - Provide pkg-config files
  - Resolves: #825402


author: Petr Machata <pmachata@redhat.com> - 4.1-2.20130314
changelog:
  - Fix mfence patch.  Since the __TBB_full_memory_fence macro was
    function-call-like, it stole () intended for function invocation.


author: Petr Machata <pmachata@redhat.com> - 4.1-6.20130314
changelog:
  - Drop ExclusiveArch altogether. TBB has a fallback code that works
    irrespective of the architecture.


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-1
changelog:
  - Upgrade 1.9.4 release
  - Fixed bad day-of-week of first entry in changelog
  - Do not install on systems with efi partition
    See https://access.redhat.com/articles/2217041
    Resolves: rhbz#1275031
    Resolves: rhbz#1293526
    Resolves: rhbz#1307176
    Resolves: rhbz#1313876
    Resolves: rhbz#1332691


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.4-2
changelog:
  - Test for UEFI system with /sys/firmware/efi, rather than looking in
    the boot directory for an efi directory.
  - Allow install on UEFI platform, but with warning message, in order to
    permit completion of provisioning.
    Resolves: rhbz#1356571


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.6-3
changelog:
  Apply patches from upstream since realease of 1.9.6
    Resolves: rhbz#1515081
    Resolves: rhbz#1511798


author: Tony Camuso <tcamuso@redhat.com> - 1:1.9.12-1
changelog:
  - Upgrade to 1.9.12.
  - Removed EFI warning, since grub has been updated to use multiboot.
  - Add patch to revert "Disable GCC9 address-of-packed-member warning"
    While it was able to build locally with 'rhpkg local', the brew
    build failed, because the compiler on the brew systems did not
    recognized the new GCC9 command line flag:
    -Wno-address-of-packed-member
    Resolves: rhbz#1876747


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
    Resolves: rhbz#869315
  - Rebuild to fix systemtap on aarch64
    Resolves: rhbz#1238479


author: Tom Lane <tgl@redhat.com> 1.6.2-1
changelog:
  - Created package by stripping down postgresql specfile and adjusting
    to meet current packaging guidelines for Tcl extensions.


author: Tom Lane <tgl@redhat.com> 1.8.0-1
changelog:
  - Update to pgtcl 1.8.0.
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Michal Sekletar <msekleta@redhat.com> - 14:4.5.1-3
changelog:
  - add support for nano second timestamps (#1151406)
  - fix cdp dissector, allow zero-length data frames (#1231246)


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Resolves: #1664648 - tcpdump post creates user and groups unconditionally, raising alerts in corporate environment


author: Jaromír Končický <jkoncick@redhat.com> - 6.18.01-4
changelog:
  - Fix regression in default $status value in case of lists/pipelines
    (Changed 'anyerror' variable to 'tcsh_posix_status' with opposite meaning)
    Resolves: #1025703


author: Jaromír Končický <jkoncick@redhat.com> - 6.18.01-5
changelog:
  - Readded reverse-history-handling-in-loops patch which was created for
    tcsh version 6.17.00 in RHEL 6.4 to fix bug #814069
    Resolves: #1035235


author: David Kaspar <dkaspar@redhat.com> - 6.18.01-8
changelog:
  - Upstream's $anyerror variable re-introduced. (#1123854)
  - Fix for hang inside the 'wait' built-in of tcsh added. (#1181682)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-9
changelog:
  - 'if statement' parsing fixed when the space is missing after ')'. (#1273892)
  - Quote backslashes properly to preserve them in `...` expressions. (#1319816)
  - Fix for tcsh being interruptible while waiting for child process. (#1269370)
  - Fix of memory leak when using the 'source' built-in command.      (#1273513)
  - Print error message on stderr (instead of stdout).                (#1273498)
  - Use GLIBC's malloc instead of builtin malloc.                     (#1315713)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.18.01-12
changelog:
  - Fix another regression in tcsh-6.18.01-quote-backslashes-properly.patch
    Related: #1334751

  - Fix regression in tcsh-6.18.01-use-stderr-upon-error.patch
    Related: #1273498


author: Brian Pepple <bpepple@fedoraproject.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Drop python subpackage. gobject-introspection is used now.
  - Drop unnecessary buildroot cleaning in install section.
  - Update BR for farstream02-devel.


author: Kalev Lember <klember@redhat.com> - 0.24.1-1
changelog:
  - Update to 0.24.1
  - Fix the build with glib 2.46 and later
  - Rebuild against gobject-introspection 1.54
  - Resolves: #1507813


author: Brian Pepple <bpepple@fedoraproject.org> - 0.5.0-1
changelog:
  - Update to 0.5.0.
  - Drop media manager patch. Fixed upstream.
  - Bump minimum versions of libpurple and tp-glib needed.


author: Brian Pepple <bpepple@fedoraproject.org> - 1:5.14.1-1
changelog:
  - Update to 5.14.1.
  - Drop defattr. No longer needed.
  - Drop ignore gnome keyring patch. Fixed upstream.


author: Debarshi Ray <rishi@fedoraproject.org> - 1:5.14.1-5
changelog:
  - Add %check to run the upstream test suite on each build (Red Hat #1000705)
  - Resort to using chrpath for removing rpaths instead of hacking libtool


author: Adam Tkac <atkac redhat com> 1:0.17-51
changelog:
  - add "-debug6" option to telnetd (#rh674942)
  - telnet wasn't interruptable (^C) when started with specious -b argument (#704604)


author: Martin Sehnoutka <msehnout@redhat.com> - 1:0.17-60
changelog:
  - Introduce new -i switch
  - ip addresses will be logged into utmp instead of hostname
  - Resolves: #1323094


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-63
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - additional info added to manpage


author: Michal Ruprich - 1:0.17-64
changelog:
  - Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                      - more clear formulation of man page note - previous note was a bit ambiguous


author: Dan Kenigsberg <danken@cs.technion.ac.il> - 0.1-12
changelog:
  - Rebuilt against existing David Type1 fonts. Bug #509697
  - Require specific culmus font packages and obsolete tetex-fonts-hebrew-0.1-9. Bug #485639


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Than Ngo <than@redhat.com> - 2:2012-34.20130427_r30134
changelog:
  - Resolves: bz#1064453, add missing texlive-metapost and groff.enc
    Resolves: bz#948532, add missing manpages for pdfxmltex, xmltex
    Resolves: bz#1213886, tex4ht-bin requires latex
    Resolves: bz#1217556, port for poppler-0.26.5
    Resolves: bz#1035679, scriptlet errors when installing texlive packages
    Resolves: bz#1184987, add texlive-titling


author: Than Ngo <than@redhat.com> - 2:2012-39.20130427_r30134
changelog:
  - Resolves: #1320337 - dependiency on texlive-xetex-def
  - Resolves: #1350485 - updmap from texlive-tetex-bin cannot be executed
  - Resolves: #1337925 - scriptlet errors
  - Resolves: #1186825 - add coreutils for post/unpost


author: Jan Synáček <jsynacek@redhat.com> - 5.2-12
changelog:
  - remove unnecessary installation dependency on xinetd(#1136866)
  - improve systemd unit files(#1167777)


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-2
changelog:
  - fix <test> usage in fontconfig files (Closes: #837538)
  - refresh fontconfig files with the latest upstream version


author: Daiki Ueno <dueno@redhat.com> - 0.5.0-4
changelog:
  - disable X fonts.dir generation
  - remove obsolete -compat subpackage
  - remove %defattr from %files
  - add missing "make" in %build


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-6
changelog:
  - Kill session after user logs out
    Resolves: bz#1259757

    Build against Xorg 1.20
    Resolves: bz#1564061


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-14
changelog:
  - Fix rendering on big endian system
    Resolves: bz#1618777

    Do not automatically kill sessions
    Resolves: bz#1646889


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-20
changelog:
  - Fix stack buffer overflow in CMsgReader::readSetCursor
    Resolves: bz#1791773

  - Fix heap buffer overflow in DecodeManager::decodeRect
    Resolves: bz#1791768

  - Fix heap buffer overflow in TightDecoder::FilterGradient
    Resolves: bz#1791763

  - Fix heap-based buffer overflow triggered from CopyRectDecoder
    Resolves: bz#1791747

  - Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
    Resolves: bz#1791759

  - Add option to fallback to empty port when the specified one is taken
    Resolves: bz#1791996


author: Jan Grulich <jgrulich@redhat.com> - 1.8.0-23
changelog:
  - Rebuild for xorg-x11-server CVEs
    Resolves: CVE-2022-4283 (bz#2154267)
    Resolves: CVE-2022-46340 (bz#2154261)
    Resolves: CVE-2022-46341 (bz#2154264)
    Resolves: CVE-2022-46342 (bz#2154262)
    Resolves: CVE-2022-46343 (bz#2154265)
    Resolves: CVE-2022-46344 (bz#2154266)


author: Petr Pisar <ppisar@redhat.com> - 1.7-39
changelog:
  - Fix maximal RSS report (bug #702826)
  - Clean spec file
  - Recompute CPU usage at finer level (bug #527276)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.9-4
changelog:
  - Packaged tkAppInit.c into devel subpackage (#702088)
  - Removed spec code for deprecated prolog.ps file (#702088)
  - Removed rpmlint warning - macro in comment


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Enabled threading
    Resolves: rhbz#676880
  - Fixed crash if there are no fonts installed (by no-fonts-fix patch)
    Resolves: rhbz#1218943


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Jiri Kucera <jkucera@redhat.com> - 2.11-6
changelog:
  - Added --fuser option support.
  - Fixed bad URL, Source0, and bogus date in spec.
    Resolves: #1330328


author: Sven Lankes <sven@lank.es> 1.5-1
changelog:
  - New upstream release
  - Do the right thing (tm) and revert to $upstream-behaviour: 
     No longer install tmux setgid and no longer use /var/run/tmux 
     for sockets. Use "tmux -S /var/run/tmux/tmux-`id -u`/default attach"
     if you need to access an "old" tmux session
  - tmux can be used as a login shell so add it to /etc/shells


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-8
changelog:
  - Fix build failure in fedora rawhide. It was caused due to 
    removal of CMAKE_INSTALL_LIBDIR macro from /etc/rpm/cmake.macros 
    that was present in previous fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-12
changelog:
  - Fixes for rhbz #985785 to fix crash issue in Filecert manager
    in platidimv.
  - Fixed crashing of attestation imv so while loading due to
    wrong static initialization order in attestation imv.
  - Fixes some coverity scan errors.
  - Fixed comilation when sysconf dir variable is not defined on a
    local system. Added some messaging outputs during compilations.
  - Fixed erroneous data type conversion issues causing wrong outputs
    and with potential for data corruption.
  - Fixes tncutil build issue from upstream commit
  - Fixes typo in assignment in platidimv from upstream commit
  - Fixes Fix typo in variable declaraction in hostscannerimv
    from upstream commit
  - Fixes imcv shared library build issue from upstream commit


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-13
changelog:
  - Implemented support for dlopen
  - Removed libtool support
  - Fixed imv and imc build issues arising from a
    previous upstream patch
  - Fixed a few coverity scan error issues


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.12.1-12
changelog:
  - Allow unprivileged users to subscribe to indications
    Resolves: #1049313
  - Remove packages which are part of the minimum build environment from BR 
    Resolves: #1049651
  - Fix Pegasus malforms EmbeddedInstances in upcalls
    Resolves: #1038013


author: Stephen Gallagher <sgallagh@redhat.com> - 2:2.12.1-15
changelog:
  - Generate SSL certificates with x509v3 and CA:FALSE
  - Automatically import self-signed certificates into local trust-store
  - Move SSL certificate generation into the systemd service file
  - Resolves: #1041555


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-1
changelog:
  - Fix packaging of tmpfiles
    Resolves: #1180993
  - Add install Platform_LINUX_XSCALE_GNU.h, Linkage.h and CIMListener.h to -devel
    because of lmiwbem (CIMListener class), add symlink to libpeglistener.so.1
    Resolves: #1120701
  - Update to upstream version 2.14.1
    Resolves: #1097187, #1039050, #1007386
  - Fix sending of SNMPv3 traps
    Resolves: #1218954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-2
changelog:
  - Remove files created in %check
    Resolves: #1232341
  - Fix setupSDK in -devel
    Resolves: #1127399
  - Add snmp tests to the -test rpm and enable them, configure snmptrapd
    in test setup phase
    Related: #1218954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-4
changelog:
  - Fix ppc64le SDK
    Resolves: #1266235
  - Move SSL certificates to more convenient place, update related scripts
    and README.RedHat.SSL
    Resolves: #1308809
  - Change repository update to get rid of warning messages during cleanup
    Resolves: #1257085
  - Remove TESTID environment variable which breaks automatic testing in Beaker
    Resolves: #1266655
  - Add CIMEnumerationContext.h and UintArgs.h to -devel
    Resolves: #1335873
  - Fix wrong formatting in cimconfig man page
    Resolves: #1263895
  - Add missing description of httpSessionTimeout to cimconfig man page
    Resolves: #1263894


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-9
changelog:
  - Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368122


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2
changelog:
  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5
changelog:
  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9
changelog:
  - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
  - Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
  - Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
  - Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
  - Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
  - Resolves: rhbz#1455483 Add support for characters "<" and ">" to the possible whitelist values


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-12
changelog:
  - Resolves: rhbz#1367492 harden package permissions
  - Resolves: rhbz#1523112 tomcat systemd does not cope with - in service names
  - Resolves: rhbz#1629162 tomcat-dbcp.jar is missing from tomcat package
  - Resolves: rhbz#1822453 Tomcat parses a request having an absolute URI path incorrectly and returns 404 Not Found
  - Resolves: rhbz#1795645 connection leak with StatementCache, SlowQueryReport or StatementDecoratorInterceptor
  - Resolves: CVE-2019-17563 tomcat: session fixation when using FORM authentication


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-14
changelog:
  - Revert rhbz#1814315 because it caused other issues with ipa-server, see rhbz#1831127
  - Resolves: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-15
changelog:
  - Resolves: CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS


author: Hui Wang <huwang@redhat.com> 0:7.0.76-16
changelog:
  - Resolves: rhbz#1814315 CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling


author: Endi Sukma Dewata <edewata@redhat.com> 7.1.2-1
changelog:
  - Bugzilla Bug #1198450 - Support for Apache Tomcat 8
  - Bugzilla Bug #1214858 - Add nuxwdog support (alee)


author: Endi Sukma Dewata <edewata@redhat.com> 7.1.2-2
changelog:
  - Bugzilla Bug #1344804 - Build failure on RHEL 7.3
    (patch for Bugzilla Bug #1245786 - Build failure on F23 was backported to
     RHEL 7 to coincide with Apache Tomcat version change to 7.0.68+)


author: Matthew Harmsen <mharmsen@redhat.com> 7.2.0-1
changelog:
  - tomcatjss Pagure Issue #6 - Rebase tomcatjss to 7.2.0 in Fedora 25+ (mharmsen)
  - Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.0 in RHEL 7.4 (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 7.2.0-2
changelog:
  - Changed build so that it did not package and depend upon the specfile being
    included inside the tarball


author: Matthew Harmsen <mharmsen@redhat.com> - 7.2.1-3
changelog:
  - Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
  - ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
    - tomcatjss Pagure Issue #4 - Support for Event API (edewata)


author: Matthew Harmsen <mharmsen@redhat.com> 7.2.1-7
changelog:
  - Updated jss build and runtime dependencies
  - Bugzilla Bug #1596769 - Tomcatjss: Add support for TLS_*_SHA384
    ciphers (cfu)


author: Matthew Harmsen <mharmsen@redhat.com> 7.2.1-7
changelog:
  - Updated jss build and runtime dependencies
  - Bugzilla Bug #1597180 - Tomcatjss: Add support for TLS_*_SHA384 ciphers
    [rhel-7.5.z] (cfu)


author: Jack Magne <jmagne@redhat.com> 7.2.1-8
changelog:
  - Bugzilla Bug #1632618 - CC: tomcatjss: unable to enable OCSP checking
    from peer AIA extension [rhel-7.6.z] (jmagne)


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-1
changelog:
  - Update to 3.14.3
  - Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
  Resolves: #1174589


author: Bastien Nocera <bnocera@redhat.com> 3.14.3-4
changelog:
  - Remove Python3 plugins, they're mostly accessory plugins,
    and RHEL 7.2 only support Python2 for now
  Resolves: #1259643


author: Ray Strode <rstrode@redhat.com> 3.14.3-5
changelog:
  - Add more goo to the compat desktop file to prevent them
    from exposing in control-center
  Related: #1259292


author: John D. Ramsdell <ramsdell@mitre.org> - 1.0-6
changelog:
  - Changed URL to SourceForge development site.
  - Changed source to NEU site.
  - Quoted % references in macros within changelog.
  - README: Note tpm-tools only needed to take ownership of a TPM.


author: Michal Schmidt <mschmidt@redhat.com> - 1.3.5-3
changelog:
  - Add the LICENSE file to the -pkcs11 subpackage too, as it may be
    installed independently.
  - Remove useless macros.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.3.9-3
changelog:
  - Fix garbage being printed in tpm_version output
  - backport spec file cleanups
  Resolves: rhbz#1654985


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Removed BuildRequires for gcc
  - Move tpm2-abrmd systemd service to /usr/lib/systemd/system
  - Added scriptlet for tpm2-abrmd systemd service
  - Use autoreconf instead of bootstrap


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Rename and relocate udev rules file to _udevrulesdir
  - Update scriptlet to add service name after systemd_postrun


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-11
changelog:
  - Fix Requires to be against tpm2-tss instead of tpm2-tss-devel
  - Add BuildRequires to specify version tpm2-tss-devel needed
  - Add Requires to tpm2-abrmd-devel for tpm2-tss-devel
  resolves: rhbz#1627827


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Remove pkg_version to avoid dupliate use of version
  - Remove redundant BuildRequires for autoconf/automake/pkgconfig
  - Add comments for BuildRequires of sapi/tcti-device/tcti-socket
  - Use ExclusiveArch instead of ExcludeArch
  - Requires tpm2-tss version updated to 1.0-2
  - Updated release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-3
changelog:
  - Change spec file permission to 644 to avoid rpmlint complain
  - Update Requires to fix dependency check error reported in Bodhi
  - Remove tpm2-tss-devel version in BuildRequires comment
  - Update release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Dependency check failed for Requires again, here to fix this
  - Update release version and changelog


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-5
changelog:
  - Remove epel dependencies
  - Change tpm2-tss dependency to not be tied to 1 version
  - Fix resource leak in InitSysContext
  - Clean up HashEKPublicKey
  - Add needed null checks to tpm2_getmanufec
  - clean up resource leak in tpm2_getmanufec
  - use strdup to get server address in tpm2_getmanufec
  - change preparePcrSelections_g to void
  - return on success in print_rc_tpm_error_code
  - Update release version
  resolves: rhbz#1275029 - Add tpm2.0-tools package


author: Sun Yunying <yunying.sun@intel.com> - 1.0-2
changelog:
  - Remove global macro pkg_version to avoid duplicate of version
  - Use ExclusiveArch instead of ExcludeArch
  - Use less wildcard in %files section to be more specific
  - Add trailing slash at end of added directory in %file section
  - Remove autoconf/automake/pkgconfig(cmocka) from BuildRequires
  - Increase release version to 2


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.0-3
changelog:
  - Add systemd unit for resourcemgr
  - Add utils subpackage
  - Add Makefile.am patch to install test programs
  - Add patch to swap out AX_PTHREAD for different check
  - Increase release version to 3
  resolves: rhbz#1275027 - Add TPM 2.0 System API (SAPI) library


author: John Kacur <jkacur@redhat.com> - 2.2.1-2
changelog:
  - Various fixes for problems discovered by rpmlint
  - Update the address of FSF in various files
  - Install documentation and non-script python files at mode 644


author: John Kacur <jkacur@redhat.com> - 2.2.1-8
changelog:
  - Remove patches from tar file, and apply them explicitly in the spec file
  - trace-split-Do-not-allow-spliting-of-latency-tracers.patch
  Resolves: rhbz#1198942


author: John Kacur <jkacur@redhat.com> - 2.2.2-1
changelog:
  - Update to trace-cmd-v2.2.2 which includes the following fixes
  - trace-input: Init kbuf back to NULL after free kbuf
  - kernelshark: Use ull annotation for 64bit numbers
  Resolves: rhbz#1219847


author: John Kacur <jkacur@redhat.com> - 2.6.0-7
changelog:
  - Updated to latest upstream, which among many fixes also includes
  - external library for other programs to link to trace-cmd
  - bash completion
  Resolves: rhbz#1445825


author: Felipe Borges <feborges@redhat.com> -1.10.5-3
changelog:
  - Add osinfo ontology to the default TrackerNamespace
  - Whitelist "openat" sys call in seccomp
  - Resolves: #1435340


author: Carlos Garnacho <cgarnach@redhat.com> - 1.10.5-4
changelog:
  - Remove WITHOUT ROWID optimizations from fts5 to preserve compat with sqlite 3.7.x
  - Resolves: #1451669


author: Carlos Garnacho <cgarnach@redhat.com> - 1.10.5-5
changelog:
  - Update to upstream 1.10.6, backporting all fixes as of yet for UNIQUE constraint nie:url errors
  - Resolves: #1430769


author: Carlos Garnacho <cgarnach@redhat.com> - 1.10.5-6
changelog:
  - Backport 1.10.6 nie:url UNIQUE constraint fixes to 1.10.5
  - Fix the previous changelog entry
  - Resolves: #1430769


author: Kamil Dudka <kdudka@redhat.com> - 1:3.2.5d-11
changelog:
  - install man pages using the correct file name suffix
  - provide the fig2ps2tex.sh man page as a symlink


author: Pravin Satpute <psatpute@redhat.com> 3.0.9-42
changelog:
  - Resolves: rh#1125703 ttmkfdir fails to build on arch: ppc64le (Generic build failure)
  - Patch from Peter Robinson <pbrobinson@redhat.com>


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1643654
    - disable KSM only once, re-enable it only on full rollback
      resolves: rhbz#1622239
    - functions: reworked setup_kvm_mod_low_latency to count with kernel changes
      resolves: rhbz#1649408
    - updated virtual-host profile
      resolves: rhbz#1569375
    - added log message for unsupported parameters in plugin_net
      resolves: rhbz#1533852
    - added range feature for cpu exclusion
      resolves: rhbz#1533908
    - make a copy of devices when verifying tuning
      resolves: rhbz#1592743
    - fixed disk plugin/plugout problem
      resolves: rhbz#1595156
    - fixed unit configuration reading
      resolves: rhbz#1613379
    - reload profile configuration on SIGHUP
      resolves: rhbz#1631744
    - use built-in functionality to apply system sysctl
      resolves: rhbz#1663412


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1643654
    - used dmidecode only on x86 architectures
      resolves: rhbz#1688371
    - recommend: fixed to work without tuned daemon running
      resolves: rhbz#1687397


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-7
changelog:
  - plugin_sysctl: fixed traceback when assignments modifiers ('<', '>')
    are used with sysctl and the current sysctl value is the same as
    the new value
    Resolves: rhbz#1739418


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-9
changelog:
  - Fixed SIGHUP handling
    Resolves: rhbz#1702724
  - Tune irqbalance service
    Resolves: rhbz#1720042
  - Added netcat requirement
    Resolves: rhbz#1746436
  - sysctl: made reapply_sysctl ignore configs from /usr
    Resolves: rhbz#1776149
  - profiles: define variables before use
    Resolves: rhbz#1781664


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-10
changelog:
  - realtime-virtual-host: remove lapic advancement calculation and
    related qemu-kvm-tools-rhev requirement
    Resolves: rhbz#1852253


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11.0-5.1
changelog:
  - plugin_sysctl: fixed traceback when assignments modifiers ('<', '>')
    are used with sysctl and the current sysctl value is the same as
    the new value
    Resolves: rhbz#1739563


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.1-1
changelog:
  - Initial release: cloudlinux-default tuned profile for CloudLinux 7
  - AL-1741: IO scheduler configuration: set deadline for rotational devices and
             noop for SSD disks
  - AL-1888: disable tcache/tswap OpenVZ subsystems
  - AL-1889: increase nr_requests value to 1024


author: Konstantin Vaskovtsov <derkonstantin@cloudlinux.com> 0.1-10
changelog:
  - CAG-862: Add another profile: cloudlinux-latency-performance with min_perf_pct=100 and force_latency=1


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.1-1.el7
changelog:
  - Initial release: cloudlinux-default tuned profile for CloudLinux 7
  - AL-1741: IO scheduler configuration: set deadline for rotational devices and
  -            noop for SSD disks
  - AL-1888: disable tcache/tswap OpenVZ subsystems
  - AL-1889: increase nr_requests value to 1024


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 0.1-2
changelog:
  - AL-1900: disable hugepages
  - Add OpenVZ OOM adjustments
  - OOM adjustments: Kill php, lsphp, Phusion Passenger overrun workers first


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 0.1-3
changelog:
  - AL2020: add OpenVZ OOM adjustments
  - CLDEPLOY-42: Fixes for pci, tuned in vzlve/cldeploy inside openvz container


author: Anton Volkov <avolkov@cloudlinux.com> - 0.1-6
changelog:
  - LU-578: add vfs_cache_min_ratio=0 to tuned profile
  - LU-485 Tune kernel.pid_max to 1048576 with CL tuned profile
  - LU-406 CL6: Don't disable tuned-profile upon pkg deletion if it was not cloudlinux-*
  - LU-381 Prevent overwriting current active profile for CL6


author: Anton Volkov <avolkov@cloudlinux.com> - 0.1-6.el7
changelog:
  - LU-578: add vfs_cache_min_ratio=0 to tuned profile
  - LU-485 Tune kernel.pid_max to 1048576 with CL tuned profile
  - LU-381 Set cloudlinux profiles for CL7+ only


author: Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Stas Django <pythonpowerd@gmail.com> 0.1-8
changelog:
  - LU-578: add vfs_cache_min_ratio=0 to tuned profile
  - LU-381 Set cloudlinux profiles for CL7+ only
  - LU-485 Tune kernel.pid_max to 1048576 with CL tuned profile
  - LU-406 CL6: Don't disable tuned-profile upon pkg deletion if it was not cloudlinux-*
  - LU-381 Prevent overwriting current active profile for CL6


author: Patsy Griffin Franklin <patsy@redhat.com> - 2019a-1
changelog:
  - Rebase to tzdata-2019a
    - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
      previously predicted.
    - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
      of Pacific standard time.


author: Patsy Griffin <patsy@redhat.com> - 2019b-1
changelog:
  - Rebase to tzdata-2019b
    - Brazil will no longer observe DST going forward.
    - The 2019 spring transition for Palestine occurred 03-29, not 03-30.


author: Patsy Griffin <patsy@redhat.com> - 2019c-1
changelog:
  - Rebase to tzdata-2019c
    - Fiji will observe DST from 2019-11-10 to 2020-01-12.
    - Norfolk Island will begin observing Australian-style DST on 2019-10-06.


author: Patsy Griffin <patsy@redhat.com> - 2020a-1
changelog:
  - Rebase to tzdata-2020a
    - Morocco will spring forward on 2020-05-31 rather than
      previously predicted 2020-05-24.
    - Canada's Yukon region changed to year round UTC -07
      effective 2020-03-08.
    - America/Godthab was renamed to America/Nuuk.


author: Patsy Griffin <patsy@redhat.com> - 2020b-1
changelog:
  - Rebase to tzdata-2020b
    - Yukon timezones represented by America/Whitehorse and
      America/Dawson will change time zone rules from -08/-07 to
      permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
    - The most recent winter(+08)/summer(+11) transition for Casey Station,
      Antarctica was 2020-10-04 00:01.
    - Remove obsolete files pacificnew, systemv, and yearistype.sh
      from the distribution.


author: Patsy Griffin <patsy@redhat.com> - 2020b-3
changelog:
  - Include the upstream patch to support pacificnew for java tzupdater.
  - Set POSIXRULES macro to continue installing posixrules file.


author: Patsy Griffin <patsy@redhat.com> - 2020c-1
changelog:
  - Rebase to tzdata-2020c
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d
   - Palestine will end summer time on 2020-10-24 rather than the
     predicted 2020-10-31.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021b-1
changelog:
  - Rebase to tzdata-2021b
    - Innclude patch for Mayen
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.


author: Patsy Griffin <patsy@redhat.com> - 2021d-1
changelog:
  - Rebase to tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine's DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 2025b-1.tuxcare.els1
changelog:
  - Upgrade to tzdata-2025b
    - New zone for Aysén Region in Chile which moves from -04/-03 to -03.
    - Paraguay adopted permanent -03 starting spring 2024.
    - Improve pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
  - Include leap-seconds.list in tzdata install.


author: Pravin Satpute <psatpute@redhat.com> - 0.3-1
changelog:
  - initial packaging
  - these fonts was there in bitmap-fonts package previously, packaging it separate as per merger review suggetion.


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-26
changelog:
  - Added Conficts on redhat-release packages without unbound-anchor.timer in presets (Related #1215645)


author: Petr Menšík <pemensik@redhat.com> - 1.6.6-1
changelog:
  - Rebase to 1.6.6
  - Enable RFC 8145 Trust Anchor Signaling to help the root zone get keytag statistics
  - Enable ipsecmod support


author: Martin Osvald <mosvald@redhat.com> - 1.6.6-2
changelog:
  - Do not search for DNSSEC info when domain-insecure is set
    for stub zone (#1678550)
  - Remove KSK-2010 from configuration files - it has been revoked (#1665503)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.6.6-4
changelog:
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839172 (CVE-2020-12662), rhbz#1840258 (CVE-2020-12663)


author: Nikita Maliutin <nmaliutin@cloudlinux.com> - 1.6.6-5.tuxcare.els1
changelog:
  - CVE-2023-50387: enhanced DNS resolver performance and stability by optimizing
    the handling of DNSSEC responses, reducing the potential for resource exhaustion


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 1.6.6-5.tuxcare.els3
changelog:
  - CVE-2023-50868: avoid availabiluty of the remote attackers to cause a
    denial of service using DNSSEC


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 1.6.6-5.tuxcare.els4
changelog:
  - CVE-2024-8508: limit number of name compression calculations per packet to
    prevent denial of service attacks.


author: Viktor Borzov <vborzov@cloudlinux.com> - 1.6.6-5.tuxcare.els6
changelog:
  - CVE-2026-42960: fix cache poisoning while following delegation
  - CVE-2026-42959: fix crash during DNSSEC validation of malicious content
  - CVE-2026-41292: limit incoming EDNS options to prevent DoS


author: Kamil Dudka <kdudka@redhat.com> - 2.01-3
changelog:
  - provide a man page for units_cur as a symlink to units.1
  - mention the --check-verbose option in units.1 man page


author: Tom Lane <tgl@redhat.com> 2.3.1-1
changelog:
  - Update to version 2.3.1.  The main externally-visible change is that the
    GUI programs are not part of the unixODBC tarball anymore, so they are no
    longer in this package, and the unixODBC-kde sub-RPM has disappeared.
    There is a separate package unixODBC-gui-qt that now provides those programs.


author: David Tardon <dtardon@redhat.com> - 0.4-6
changelog:
  * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild


author: Tom Callaway <spot@fedoraproject.org> - 6.0-9
changelog:
  - Apply changes to match.c to sync with recmatch from util.c (from zip 3.0)
    This also resolves the license issue in that file.


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Jakub Martisko <jamartis@redhat.com> - 6.0-23
changelog:
  - Disable the zipbomb detection patches
  - There were too many false positives for now, will reenable this later with an option to opt-out
  - Resolves: rhbz#2020318


author: Jakub Martisko <jamartis@redhat.com> - 6.0-24
changelog:
  - Reenable the zipbomb detection patches
  - Add environment variable that disables the zipbomb detection
  - Resolves: rhbz#2020318


author: Richard Hughes <rhughes@redhat.com> - 0.9.19-1
changelog:
  - New upstream release
  - Add a Documentation tag to the service file
  - Add support for Logitech Unifying devices
  - Do not continue to poll if /proc/timer_stats is not readable
  - Fix device matching for recent kernels
  - Resolves: #848521


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-1
changelog:
  - New upstream release
  - Factor out the Logitech Unifying support to support other devices
  - Fix batteries which report current energy but full charge
  - Fix several small memory leaks


author: Richard Hughes <rhughes@redhat.com> - 0.9.20-7
changelog:
  - Mark the devel-docs subpackage as noarch to silence a rpmdiff false positive.
  - Resolves: #1070661


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate
    Resolves: #1584245


author: Rakesh Pandit <rakesh@fedoraproject.org> 0.7.5-1
changelog:
  - Upgrade to 0.7.5:
  -  Improved docs
  -  Test suite
  - 0.7.4
  -  Cleaned up code and fixed memory leaks
  - 0.7.3
  -  Builds for Cygwin, minor bug fix
  -  Changes in build system.
  -  Added: Qt Assistant documentation output
  - 0.7.2
  -  Improved and cleaned API


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20160926-1
changelog:
  - %description line in 'fontfamily_subpkg' macro split
  - requirement for 'fontpackages-filesystem' added
  - mark 'font.dir' and 'font.scale' as %ghost files
  - fix the upgrading process (for Obsoletes|Provides|Conflicts)
  - simplify creation of the subpackages with auxiliary %fontfamily_subpkg macro
  - update the fontconfig cache and X11 Logical Font Description database
    (during install/update/erase)
  - initial version of specfile created


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-1
changelog:
  - rebase to 20170801 version
  - removed urw-* string from subpackages
  - fontconfig priority value updated to 35
  - error messages from 'xset fp rehash' suppressed (bug #1466254)
  - AppStream files added into (sub)packages
  - fontconfig files added into (sub)packages
  - fixed fonts path during %install
  - source location updated to point at github.com


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-2
changelog:
  - urw-base35-fonts-20170801-000-split-urw-fallback.patch added
  - decrease the fontconfig priority/ordering value to 60 (bug #1494850)
  - set same priority value for urw-fallback.conf as for other files (bug #1495199)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
  - *-devel subpackage added
  - typos & syntax fixed for AppStream files
  - NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
  - *-nimbus-sans-narrow subpackage dropped
  - priority/ordering decreased [60->61]
  - ship *.otf format files as well


author: Thomas Haller <thaller@redhat.com> 1.2.7-3
changelog:
  - Add manual page for usb_modeswitch_dispatcher and fix errors in
    manual page of usb_modeswitch (rhbz#948451, rhbz#884203).


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-7
changelog:
  - RHEL 7.5 erratum
    - Fixed usbguard-daemon on systems with kernel >= 4.13
    - Use distribution specific usbguard-daemon.conf instead
      of the upstream version
    Resolves: rhbz#1516930


author: Daniel Kopeček <dkopecek@redhat.com> 0.7.0-8
changelog:
  - RHEL 7.5 erratum
    - Require a lower version of libaudit during build-time
    Resolves: rhbz#1491313


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-1
changelog:
  - RHEL 7.6 erratum
    - Replaced asciidoctor dependency with asciidoc
    Resolves: rhbz#1508878 - Rebase USBGuard to latest upstream
    Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values
    Resolves: rhbz#1487233 - invalid path for AuditFilePath in usbguard-daemon.conf is ignored


author: Daniel Kopeček <dkopecek@redhat.com> - 0.7.4-2
changelog:
  - RHEL 7.6 erratum
    - Restore old behavior for loading IPC access control files
    Resolves: rhbz#1487229 - [RFE] improve log error messages for invalid usbguard-daemon.conf values


author: Radovan Sroka <rsroka@redhat.com> - 0.7.4-3
changelog:
  - RHEL 7.8 erratum
    - "usbguard add-user" commands fails with "Error: parsed key is not in key set: 'RuleFile'"
    Resolves: rhbz#1689048


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
  - Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
  - Fix a few (harmless) coverity warnings


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
  - Use the new libusb autodetach kernel driver functionality
  - Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Victor Toso <victortoso@redhat.com> - 0.6-8
changelog:
  - Fix migration due lack of capabilities from source host
    Resolves: rhbz#1185167
  - New callback to drop isoc packets in order to avoid high memory
    consumption in the client
    Resolves: rhbz#1312913


author: Miloslav Trmač <mitr@redhat.com> - 1.110-1
changelog:
  - Update to usermode-1.110.
    Note that this drops halt/poweroff/reboot helpers, the respective
    implementations in systemd now include PolicyKit support.  Spec file change
    based on a patch by Lennart Poettering <lpoetter@redhat.com>.
    Resolves: #804088, #849208


author: Jiri Kucera <jkucera@redhat.com> - 1.111-6
changelog:
  - Fix inconsistent capitalization in userhelper.8
    Fix URL and Source
    Fix bogus dates
    Resolves: #1349840, #1502441


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-20
changelog:
  - drop last man page change, that option is just for compatibility
  - fix NAME section of man pages to be whatis friendly


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-23
changelog:
  - drop uuid-pgsql subpackage, it is outdated and does not work, use 
    uuid-ossp module from postgresql-contrib instead


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-20
changelog:
  - Rebase to fedora 3.11.0
    (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)


author: Mark Wielaard <mjw@redhat.com> - 3.11.0-21
changelog:
  - Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
  - Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
  - Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)


author: Mark Wielaard <mjw@redhat.com> - 3.12.0-8
changelog:
  - Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
  - Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-9
changelog:
  - valgrind 3.13.0 (fedora).
  - Update description.
  - Drop all upstreamed patches.
  - Add valgrind-3.13.0-ppc64-check-no-vsx.patch
  - Add valgrind-3.13.0-epoll_pwait.patch (#1462258)
  - Add valgrind-3.13.0-ppc64-diag.patch
  - Add valgrind-3.13.0-arm64-hwcap.patch (#1464211)
  - Add valgrind-3.13.0-arm-index-hardwire.patch (#1466017)
  - Add valgrind-3.13.0-ucontext_t.patch
  - Add valgrind-3.13.0-gdb-8-testfix.patch
  - Add valgrind-3.13.0-disable-vgdb-child.patch
  - Add --error-exitcode=1 to /bin/true check.
  - Add valgrind-3.13.0-xml-socket.patch
  - Add valgrind-3.13.0-ppc64-vex-fixes.patch
  - Add valgrind-3.13.0-amd64-eflags-tests.patch
  - Add valgrind-3.13.0-suppress-dl-trampoline-sse-avx.patch
  - Add valgrind-3.13.0-static-tls.patch
  - Workaround gdb/python bug in testsuite (#1434601)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-11
changelog:
  - Make building of libmpi wrapper explicit (#1530219)
  - Add valgrind-3.13.0-debug-alt-file.patch
    and valgrind-3.13.0-build-id-phdrs.patch (#1589844)
  - Add valgrind-3.13.0-s390-cgijnl.patch (#1589848)
  - Add valgrind-3.13.0-ppc64-mtfprwa-constraint.patch (#1589852)


author: Mark Wielaard <mjw@redhat.com> - 3.13.0-13
changelog:
  - Improved valgrind-3.13.0-arm64-hwcap.patch (#1593686)
  - Add valgrind-3.13.0-arm64-ptrace.patch (#1593682)


author: <sshedmak@redhat.com> - 1.1.2-1
changelog:
  - Fixed FSType, Preferred Styles, UniqueID and Fullname
  - Fixed Invalid Glyph Names reported by fontlint
  - with exceptions string added in License


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-2
changelog:
  - 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.160-3
changelog:
  - 1267826 - Include c++11 syntax highlighting in vim
  - 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:7.4.629-1
changelog:
  - 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
  - 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'


author: Marek Kasik <mkasik@redhat.com> - 3.14.3-1
changelog:
  - Update to 3.14.3
  - Add translations update from translation team
  - Add translation fix from upstream
  - Remove unused patches
  - Resolves: #1174568


author: Felipe Borges <feborges@redhat.com> - 3.14.3-6
changelog:
  - Add minimize button to the fullscreen toolbar
  - Handle domain when looking for credentials
  - Store credentials for RDP
  - Fix RDP initialization with recent FreeRDP
  - Allow scalling of RDP sessions
  - Resolves: #1291275


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-14
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839745


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-1
changelog:
  - Update to 3.22.0
  - Remove/modify current patches when needed
  - Rely on file triggers
  - Resolves: #1384965


author: Ondrej Holy <oholy@redhat.com> - 3.22.0-6
changelog:
  - Do not restart service after unclean exit code
  - Do not listen all if invalid interface is provided
  - Resolves: #1546043, #1580577


author: Pavel Hrdina <phrdina@redhat.com> - 1.2.1-1
changelog:
  - rebased to latest upstream version 1.2.1 (rhbz#1197254)
  - clone: do not use a '/' separator when using a disk file under / (rhbz#1210564)
  - spec: we don't need to depend on qemu-kvm (rhbz#1046651)
  - doc: make --sparse documentation in man page consistent (rhbz#1210572)


author: Pavel Hrdina <phrdina@redhat.com> - 1.2.1-3
changelog:
  - Fix adding iscsi pools (bz 1231558) (rhbz#1235987)
  - virt-xml: refactor the handling of --define and --update (rhbz#1192875)
  - virtinst.cpu: fix copy host cpu definition (rhbz#1240938)
  - refactor detection of guest type capabilities (rhbz#1215692)
  - capabilities: detect ACPI and APIC capabilites properly (rhbz#1215692)
  - virtinst.support: enable hv_time support since qemu-kvm (rhbz#1083537)


author: Pavel Hrdina <phrdina@redhat.com> - 1.2.1-4
changelog:
  - virtManager/create: update capsinfo sooner in set_conn_state (rhbz#1244566)
  - support: enable hv_time since qemu-kvm 1.5.3 from RHEL (rhbz#1083537)


author: Pavel Hrdina <phrdina@redhat.com> - 1.2.1-5
changelog:
  - details: don't display error if machine is missing in XML (rhbz#1238981)
  - hostdev: add an address element for USB host devs if necessary (rhbz#1230611)
  - virtinst: fix two undefined variable warnings (rhbz#1230611)
  - Revert "create: customize: Hide bus=virtio-scsi" (rhbz#1206097)
  - scsi-storage: unify SCSI storage code and logic (rhbz#1206097)
  - virt-install: report an error for pxe install without network (rhbz#1250382)
  - addstorage: remove _check_ideal_path (rhbz#1232599)


author: Pavel Hrdina <phrdina@redhat.com> - 1.3.2-1
changelog:
  - rebased to latest upstream version 1.3.2 (rhbz#1296550)
  - create: Drop explicit kickstart UI (rhbz#1086577)
  - virt-manager: revive cli dbus API (rhbz#1162815)
  - cli: Have '--input tablet' default to bus=usb (rhbz#1232087)
  - storage: Fix updating UI when volume deleted (rhbz#1233531)
  - ui: improve pause/resume tooltip (rhbz#1238618)
  - virt-install: don't report missing console in extra-args for ppc64 (rhbz#1247434)
  - details: Use devicedisk path lookup for source_pool (rhbz#1257469)
  - virtinst.connection: detect RHEL system also for session connection (rhbz#1258691)
  - man: virt-install: fix a typo in examples (rhbz#1263900)
  - virt-install: report warning for cpuset=auto on non-NUMA host (rhbz#1263903)
  - virt-install: always enable pae for xen hvm 64bit guest (rhbz#1267160)
  - urlfetcher: Recognize RHEL Atomic Host ISOs (rhbz#1268001)
  - storage: remove attempt counter from disk allocation thread (rhbz#1270277)
  - virt-install: use correct path for linux and initrd for SLES on ppc64 (rhbz#1270430)
  - virt-clone: remove socket path for unix channel (rhbz#1270696)
  - man: fix cdrom section in virt-install man (rhbz#1290314)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.0-1
changelog:
  - rebased to latest upstream version 1.4.0 (rhbz#1296550)
  - virt-manager: connect with openGraphicsFD (rhbz#1341453)
  - ui: remove "Restore Saved Machine..." from File menu of Connection Details (rhbz#1340356)
  - virt-install: add a new guest feature GIC for ARM guests (rhbz#1334857)
  - virt-manager: fix --show-domain-creator to not depend on manager window (rhbz#1331707)
  - man: virt-manager: properly indent --spice-disable-auto-usbredir (rhbz#1331633)
  - virtinst: add virtio device model and accel3d attribute (rhbz#1326589)
  - addhardware: don't remove QXL if VNC graphics are configured (rhbz#1326544)
  - urlfetcher: Fix rawhide URL detection (rhbz#1321719)
  - virt-install: concatenate all extra-args argument (rhbz#1315941)
  - create: report an error if storage doesn't exists for import installation (rhbz#1305210)
  - console: fix checkbox to save password if it was loaded from keyring (rhbz#1302175)
  - connection: fix detection that libvirtd is stopped (rhbz#1297303)
  - localization: mark several strings as translatable (rhbz#1271152)
  - create: skip continue-install restart if user destroys VM (rhbz#1235238)
  - cli: add --graphics listen=socket support (rhbz#1044570)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.0-2
changelog:
  - translation: mark some strings to be translated (rhbz#1271152)
  - translation: fix usage of translate function (rhbz#1271152)
  - Add complete translations for supported languages (rhbz#1282276)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-1
changelog:
  - rebased to latest upstream version 1.4.1 (rhbz#1422472)
  - virtManager.clone: don't generate default clone_path for some storage pools (rhbz#1420190)
  - virtinst.diskbackend: unify how we get disk type (rhbz#1420187)
  - virtManager/interface: detect whether IP address comes from DHCP server (rhbz#1410722)
  - virtManager/viewers: fix connection to remote SPICE with password (rhbz#1401790)
  - man: virt-install: keymap is valid for spice graphics as well (rhbz#1399091)
  - virtinst/cli: set default value for disk sparse to "yes" (rhbz#1392990)
  - virtManager/addhardware: get supported disk bus types from libvirt (rhbz#1387218)
  - domain: Use libvirt.VIR_DOMAIN_OPEN_GRAPHICS_SKIPAUTH (rhbz#1379581)
  - virt-manager: don't autostart other connection if --show-* was specified (rhbz#1377244)
  - ui/snapshots: add a tooltip for refresh button (rhbz#1375452)
  - virt-install: fix --wait=0 to behave like --noautoconsole (rhbz#1371781)
  - domain: add support to rename domain with nvram vars file (rhbz#1368922)
  - man/virt-install: remove -c as short for --connect (rhbz#1366241)
  - console: set unavailable page while closing details window (rhbz#1365367)
  - virt-clone: add support to clone nvram VARS (rhbz#1243335)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-2
changelog:
  - graphics: skip authentication only for VNC with listen type none (rhbz#1434551)
  - storage: Move alloc/cap validation to validate() (rhbz#1433239)
  - Update italian translation from zanata (rhbz#1435806)
  - Fix busted italian translation, again (bug 1433800) (rhbz#1435806)
  - Update some translations (rhbz#1435806)
  - Fix format errors in it.po and ko.po (rhbz#1435806)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-3
changelog:
  - cli: Don't double warn when skipping disk size warning (rhbz#1433239)
  - devicedisk: Raise proper error on invalid source_volume (rhbz#1445198)
  - sshtunnels: Detect listen type=none for VNC (rhbz#1445714)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-4
changelog:
  - virtinst.cpu: don't validate "cpus" for NUMA cells (rhbz#1281526)
  - virtinst: introduce support for <maxMemory> element (rhbz#1281526)
  - virtinst: add support for memory device (rhbz#1281526)
  - interface: don't print error for active interface without an IP address (rhbz#1449509)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-5
changelog:
  - Reset Guest.domain to None on domain creation error (rhbz#1441902)
  - guest: Don't repeatedly overwrite self.domain (rhbz#1441902)
  - guest: Only use define+start logic for vz (rhbz#1441902)
  - virtinst.diskbackend: set pool after creating StorageVolume (rhbz#1450311)
  - virtManager.connection: introduce cb_add_new_pool (rhbz#1435064)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.1-6
changelog:
  - virt-install: add support for SMM feature (rhbz#1387479)
  - virt-install: add support for loader secure attribute (rhbz#1387479)
  - virtinst: if required by UEFI enable SMM feature and set q35 machine type (rhbz#1387479)
  - localization: update Japanese translations (rhbz#1375044)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.2-1
changelog:
  - Rebased to virt-manager-1.4.2 (rhbz#1472271)
  - The rebase also fixes the following bugs:
      rhbz#1457170


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-1
changelog:
  - Rebased to virt-manager-1.4.3 (rhbz#1472271)
  - The rebase also fixes the following bugs:
      rhbz#1486313, rhbz#1461684, rhbz#1456185, rhbz#1455491, rhbz#1453094
      rhbz#1446486, rhbz#1441127, rhbz#1430642


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-2
changelog:
  - domain: don't add URI into params for tunneled migration (rhbz#1456185)
  - diskbackend: convert to long the calculated size (rhbz#1450908)
  - diskbackend: get a proper size of existing block device while cloning (rhbz#1450908)


author: Pavel Hrdina <phrdina@redhat.com> - 1.4.3-3
changelog:
  - delete: undefine only persistent domain (rhbz#1517119)
  - localization: update Japanese translations (rhbz#1481239)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-1
changelog:
  - Rebased to virt-manager-1.5.0 (rhbz#1562102)
  - The rebase also fixes the following bugs:
      rhbz#1527834, rhbz#1544479


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-2
changelog:
  - virtinst: Remove only auto-generated channel source path (rhbz#1591670)
  - virtinst: read CPU model from domain capabilities (rhbz#1525337)
  - virtinst: compare host and domain cpu models (rhbz#1525337)
  - virtinst: Trivial spelling fix (rhbz#1525337)
  - domain: cpu: Add set_defaults (rhbz#1525337)
  - guest: Add DomainCapabilities caching (rhbz#1525337)
  - guest: Default to cpu mode=host-model if libvirt is new enough (rhbz#1525337)
  - virt-manager: Wire up support for default mode=host-model (rhbz#1525337)
  - cpu: Have host-copy use domcaps if qemu is new enough (bz 1637767) (rhbz#1525337)
  - domain.numatune: Remove cpuset_str_to_tuple (rhbz#1566818)
  - domain.numatune: Remove MEMORY_MODES (rhbz#1566818)
  - domain.numatune: Drop cpuset validation (rhbz#1566818)
  - graphics: move all listen code into one place (rhbz#1565968)
  - cli: fix typos in virt-install --help output (rhbz#1533015)
  - cli: Fix --boot smbios_mode=sysinfo (bz 1570549) (rhbz#1570549)
  - virt-clone: fix force-copy of empty cdrom or floppy disk (rhbz#1564863)
  - cli: Drop clear_attr property (rhbz#1550513)
  - virtinst: cli: fix ParserBoot to return the parsed object (rhbz#1550513)
  - virtManager: clone: check which storage pools supports volume cloning (rhbz#1463066)
  - virtManager: domain: override rename_domain in vmmDomainVirtinst (rhbz#1667308)
  - virtManager: createinterface: don't delete ip-config window (rhbz#1563638)
  - virtManager: clone: build default clone path if we know how (rhbz#1565106)
  - prefs: Add a setting to enable/disable libguestfs inspection (rhbz#1566187)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-3
changelog:
  - domcapabilities: fix detection if host-model is safe to use (rhbz#1525337)
  - cloner: don't fail to clone VM if nvram file doesn't exist (rhbz#1679021)
  - domcapabilities: actually fix detection if host-model is safe to use (rhbz#1525337)
  - domcapabilities: introduce get_cpu_security_features (rhbz#1582667)
  - domain: cpu: introduce set_model function (rhbz#1582667)
  - domain: cpu: automatically add CPU security features for "custom" mode (rhbz#1582667)
  - domcapabilities: remove recommended CPU features from security features (rhbz#1582667)
  - domcapabilities: fix typo in function name (rhbz#1582667)
  - cli: introduce CPU secure parameter (rhbz#1582667)
  - domcapabilities: add caching of CPU security features (rhbz#1582667)
  - virt-manager: add new checkbox to control CPU security features (rhbz#1582667)
  - DomainCpu: fix detection of CPU security features (rhbz#1582667)
  - DomainCpu: check CPU model name only if model exists (rhbz#1582667)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-5
changelog:
  - clone: Fix inverted --nonsparse check (rhbz#1675743)
  - cli: fix sysinfo type parsing (rhbz#1707380)
  - domcapabilities: detect MDS new vulnerability (rhbz#1582667)


author: Pavel Hrdina <phrdina@redhat.com> - 1.5.0-6
changelog:
  - manager: Fix mem, disk, net stats graphs (bz 1543896) (rhbz#1710772)
  - cli: fix cpu secure option to actually work (rhbz#1582667)


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-2
changelog:
  - New upstream version 1.0.8.
  - Requires tiny change to ocaml-libvirt, hence dep bump.
  - Clean up the spec file.
  - Remove explicit BR ocaml-camomile (not used AFAIK).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-6
changelog:
  - Include processcsv.py script and man page, but on RHEL only
    (RHBZ#665817, RHBZ#912020)
  - Clear executable stack flag on PPC, PPC64 (RHBZ#605124).


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.8-23
changelog:
  - Use libvirt virConnectGetAllDomainStats API for better performance, accuracy
  - Include all changes from Fedora Rawhide
    resolves: rhbz#1422795


author: Pavel Grunt <pgrunt@redhat.com> - 2.0-13
changelog:
  - Fix connection using broken monitor mapping
    Resolves: rhbz#1351243
  - Provide correct exit code on cancel
    Resolves: rhbz#1374430
  - Inform user about connection failure
    Resolves: rhbz#1377100
  - Recommend using ssh-agent
    Resolves: rhbz#1377283


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-1
changelog:
  - Rebase to the latest upstream release
    Resolves: rhbz#1413982
  - Rebuild with spice-gtk 0.33
    Resolves: rbhz#1431995
  - Rebuild with correct hardening flags
    Resolves: rhbz#1420780
  - Fix display id inconsistencies in debug logs
    Resolves: rhbz#1368390
  - Provide a dialog for selecting ISOs
    Resolves: rhbz#1414016
  - Always display warning messages
    Resolves: rhbz#1386630
  - Do not print password in the logs
    Resolves: rhbz#1410030
  - Update qemu+ssh URL example
    Resolves: rhbz#1377283
  - Add cli options for precise VM selection in virt-viewer
    Resolves: rhbz#1399077


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-2
changelog:
  - Really enable the hardened build
    Resolves: rhzb#1420780
  - Fixup for precise VM selection
    Resolves: rhbz#1399077


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-3
changelog:
  - Handle initial zoom settings for vnc
    Resolves: rhbz#1436991
  - Allow to control zoom using numpad
    Resolves: rhbz#1337575
  - Support new elements in libvirt xml
    Resolves: rhbz#1411765


author: Pavel Grunt <pgrunt@redhat.com> - 5.0-4
changelog:
  - Fix seamless migration in virt-viewer
    Resolves: rhbz#1442929
  - Make file transfer progressbar smooth again
    Resolves: rhbz#1449572
  - Update translation from internal zanata
    Resolves: rhzb#1378279


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-8
changelog:
  - Show authentication dialog if in kiosk mode and connecting to ovirt
    Resolves: rhbz#1459808
  - Keep the remove-viewer-connect dialog window on top
    Resolves: rhbz#1459800
  - Show overwrite confirmation when saving screenshot file
    Resolves: rhbz#1455832
  - Fix REST endpoint used to load the storagedomains
    Resolves: rhb#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-9
changelog:
  - Drop downstream specific patch reverting string change
    Related: rhbz#1481243
  - Fix scope declaration of enable_autotools macro
    Resolves: rhbz#1504132
  - Fix wrong date in previous changelog entry
    Resolves: rhbz#1504132
  - Save oVirt uri after connecting to guest
    Resolves: rhbz#1459792
  - Adjust reference to spice-gtk man page
    Resolves: rhbz#1477966


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 5.0-10
changelog:
  - Adjust reference to spice-gtk man page for remote-viewer
    Resolves: rhbz#1477966
  - Update translations
    Resolves: rhbz#1481243


author: Victor Toso <victortoso@redhat.com> - 5.0-12
changelog:
  - Centralize recent dialog
    Resolves: rhbz#1508274
  - Always add guest name as comment
    Resolves: rhbz#1623756
  - Mark PrintScreen as translatable
    Resolves: rhbz#1510411
  - Remove symlink to spice-xpi-client-remote-viewer on update (it was dropped)
    Resolves: rhbz#1658325


author: Victor Toso <victortoso@redhat.com> - 5.0-17
changelog:
  - Fix double free on migration
    Resolves: rhbz#1713600
  - Prioritize certificate data from display over proxy
    Resolves: rhbz#1402909


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-2
changelog:
  - Include two upstream patches for detecting Xen and Linux VServer better
    (RHBZ#973663).
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-7
changelog:
  - Add support for detecting POWER KVM and LPAR
    resolves: rhbz#1147876
  - Detect RHEV/oVirt
    resolves: rhbz#1249438
  - Detect ACPI boot aarch64 guest
    resolves: rhbz#1275349
  - Fix typo in manual page
    resolves: rhbz#1099289


author: Richard W.M. Jones <rjones@redhat.com> - 1.18-2
changelog:
  - Rebase to Fedora Rawhide / upstream version.
  - Include upstream patches since 1.18 was released.
    resolves: rhbz#1476878


author: William Poteat <wpoteat@redhat.com> 0.22.1-1
changelog:
  - 1542652: When the -c option is used, don't parse the default files
    (nmoumoul@redhat.com)
  - 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)
  - Update tito releasers to include newer versions of fedora
    (csnyder@redhat.com)
  - 1560461: Make env and owner options required for approprite cases
    (jhnidek@redhat.com)
  - 1554228: Unicode issue on status update call (wpoteat@redhat.com)
  - 1387800: [RFE] virt-who can report cluster in host-to-guest mapping
    (jhnidek@redhat.com)
  - Updates for future builds based on changing environments (wpoteat@redhat.com)
  - limit version of libvirt-python (wpoteat@redhat.com)
  - 1447022: Log warning, when wrong filter is in config file
    (jhnidek@redhat.com)
  - 1511644: Support running virt-who on python 3 (csnyder@redhat.com)
  - 1520236: Do not log traceback, when server returns 429 http error
    (jhnidek@redhat.com)
  - 1492074: Enable login to ESX using password with UTF-8 string
    (jhnidek@redhat.com)
  - 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
  - 1509597: Enable to use virt-who wih VDSM again (jhnidek@redhat.com)
  - 1522383: Remove global option background (jhnidek@redhat.com)
  - 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.22.2-1
changelog:
  - Correct date ordering in changelog (wpoteat@redhat.com)
  - 1575513: Re-add changelog entries that were merged out. (wpoteat@redhat.com)
  - 1560598: Pass hostname to M2Crypto in STOMP client (khowell@redhat.com)
  - Make vdsm respect RHSM_USE_M2CRYPTO var (khowell@redhat.com)
  - Set up Travis CI to use Python 3 (jhnidek@redhat.com)
  - Fixing python 2 -> 3 issue (wpoteat@redhat.com)
  - kubevirt support (piotr.kliczewski@gmail.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - Add releaser for RHEL 7.6 (wpoteat@redhat.com)
  - Remove f26 releaser (f26 is EOL) (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - Correction to the spec file condition for python 3 (wpoteat@redhat.com)
  - Update to release tagger (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.22.2-4
changelog:
  - 1432140: Log when a duplicate hypervisor id is detected [ENT-568]
    (wpoteat@redhat.com)
  - 1368341: Warn that --sam/--satellite6 are unused & deprecated * Now logging a
    warning when --sam/--satellite6 are used. * man page and --help output
    updated to explaing that these options are unused and virt-who will report to
    either sam/satellite/stage candlepin regardless of their being there.
    (nmoumoul@redhat.com)
  - 1455062: Partial fix of high CPU usage, when many conf files used
    (jhnidek@redhat.com)
  - Correction to the spec file condition for python 3 (wpoteat@redhat.com)
  - ENT-554 Host reports for libvirt and rhevm include the system hardware uuid
    (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - Automatic commit of package [virt-who] release [0.22.2-1].
    (wpoteat@redhat.com)
  - kubevirt: warn user that dependencies are missing
    (piotr.kliczewski@gmail.com)
  - 1369634: Dont log proxy html errors for hyperv: - When hyperv gets an HTML
    page as error response from a proxy, don't log the whole html, but try to
    scrape the title off of it. - If scraping the title doesn't work, only log
    the http error code. - Changed all variables named 'xml' to 'xml_doc' in
    hyperv.py to avoid conflict with the new python keyword.
    (nmoumoul@redhat.com)
  - 1599725: Handle job status report errors (nmoumoul@redhat.com)
  - 1557296: Warn of commented out lines prefixed with space/tab (ENT-606) - When
    reading config files in python2, warn the user if a line continuation (starts
    with space/tab) is followed by '#' (nmoumoul@redhat.com)
  - kubevirt: Ignore vmis in Scheduling (piotr.kliczewski@gmail.com)
  - kubevirt: Update config (piotr.kliczewski@gmail.com)
  - Print/log debug information about filtered hosts (jhnidek@redhat.com)
  - 1577954: Added config option filter_type; ENT-580 (jhnidek@redhat.com)
  - Changed info about how filter_host_parents/exclude_host_parents filters work
    (ktordeur@redhat.com)
  - 1387800: set name of ESX cluster properly; ENT-793 (jhnidek@redhat.com)
  - Add release entry for RHEL 8 (wpoteat@redhat.com)
  - template update (wpinheir@iroman.home)
  - template update (wpinheir@iroman.home)
  - 1596041: Make python libvirt required (wpoteat@redhat.com)
  - updating RHV/RHEV/XenServer information (wpinheir@iroman.home)
  - 1581021: Decode error from unicode passwords (wpoteat@redhat.com)
  - 1510920: Change the choreography for the job status check
    (wpoteat@redhat.com)
  - ENT-493: Add option to command line to return version
    (adarshvritant@gmail.com)
  - Update executor.py (all_bright@live.com)
  - kubevirt: rename virtual machine instance (piotr.kliczewski@gmail.com)
  - Update for build process (wpoteat@redhat.com)
  - Fixed hyperv wmi query. Invalid response (500)
    (njmiller@lakemichigancollege.edu)
  - 1432140: Log when a duplicate hypervisor id is detected [ENT-568]
    (wpoteat@redhat.com)
  - 1368341: Warn that --sam/--satellite6 are unused & deprecated * Now logging a
    warning when --sam/--satellite6 are used. * man page and --help output
    updated to explaing that these options are unused and virt-who will report to
    either sam/satellite/stage candlepin regardless of their being there.
    (nmoumoul@redhat.com)
  - 1455062: Partial fix of high CPU usage, when many conf files used
    (jhnidek@redhat.com)
  - Correction to the spec file condition for python 3 (wpoteat@redhat.com)
  - ENT-554 Host reports for libvirt and rhevm include the system hardware uuid
    (wpoteat@redhat.com)
  - Add releaser for RHEL 7.6 (wpoteat@redhat.com)
  - Remove f26 releaser (f26 is EOL) (csnyder@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.24.1-1
changelog:
  - Merge in changes from Fedora packaging (wpoteat@redhat.com)
  - ENT-826 Added correlation id to virt-who reports (nmoumoul@redhat.com)
  - Releaser addition for rhel-7.7 (wpoteat@redhat.com)
  - Install subscription-manager, not python-rhsm which is deprecated: - Removed
    python-rhsm from the requirements, and added subscription-manager as
    dependency. - Added some dependencies that travis requires to install
    subscription-manager. (nmoumoul@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.24.2-1
changelog:
  - 1657104: Remove references to removed command line options
    (wpoteat@redhat.com)
  - Fixing kubevirt config path argument (piotr.kliczewski@gmail.com)
  - fix travis run (wpoteat@redhat.com)
  - 1650133: setuptools naming change (wpoteat@redhat.com)
  - 1638250: Proxy issue when https not specified (wpoteat@redhat.com)
  - Update branch definition for RHEL 8.0 branch (wpoteat@redhat.com)
  - ENT-896: Disable deprecated configuration options in python 3
    (wpoteat@redhat.com)
  - 1637407: vCenter mapping info failure due to TypeError (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com>
changelog:
  - 1667522: Omit ESX host from report when no hostname is present
    (wpoteat@redhat.com)
  - 1693858: Send hardware uuid on every check in for system reconcilliation
    (wpoteat@redhat.com)
  - kubevirt: provide user authentication (piotr.kliczewski@gmail.com)
  - 1486270: pass no_proxy from config files (wpoteat@redhat.com)
  - kubevirt: drop kubernetes and kubevirt dependencies
    (piotr.kliczewski@gmail.com)
  - 1638250: Improved fix for http proxy issue (wpoteat@redhat.com)
  - Update releaser (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.24.5-1
changelog:
  - 1695538: Provide support for hypervisor_id option
    (piotr.kliczewski@gmail.com)
  - 1695519: use correct uuid in kubevirt report (piotr.kliczewski@gmail.com)


author: William Poteat <wpoteat@redhat.com> 0.24.6-1
changelog:
  - 1530290: Remove enviroment as an input variable for the hypervisor check in
    (wpoteat@redhat.com)
  - 1523482: 1519704: Interval value set to empty string will revert to default
    value (wpoteat@redhat.com)
  - 1522384: Log at debug level when config uses default entries
    (wpoteat@redhat.com)
  - 1708524: update man page with kubevirt backend information
    (piotr.kliczewski@gmail.com)
  - 1708534: add kubeconfig to template (piotr.kliczewski@gmail.com)
  - 1516209: Configuration should be deemed invalid when server is not specified
    (wpoteat@redhat.com)
  - 1506167: Ignore new SIGHUP signals during signal handling
    (jhnidek@redhat.com)
  - 1522661: Constrict is_hypervisor field to fake virt (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.24.7-1
changelog:
  - 1718304: Fix issue when instance["BIOSGUID"] returns None
    (phess@users.noreply.github.com)
  - 1472727: Log error, when encrypted password is missing; ENT-1344
    (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.26.0-1
changelog:
  - 1530254: Update checking on environment variables (wpoteat@redhat.com)
  - 1714456: Update description of 'print_' config option (wpoteat@redhat.com)
  - 1720051: Restore the entries marked as deprecated (wpoteat@redhat.com)
  - 1652549: Add heartbeat call to virt-who cycle (wpoteat@redhat.com)
  - 1720154: Provide SYSTEM_UUID_FACT (piotr.kliczewski@gmail.com)
  - 1516120: Handling for incorrect config section headers (wpoteat@redhat.com)
  - 1722560: Make heartbeat more robust (jhnidek@redhat.com)
  - 1416298: Use unique guest attribute for state tracking (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.26.3-1
changelog:
  - 1745768: Make message unicode safe (wpoteat@redhat.com)
  - 1516209: Proper handling for empty server entry (wpoteat@redhat.com)
  - 1712300: add connection/request timeout (piotr.kliczewski@gmail.com)
  - 1751122: Clear ENV refereces from files (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.26.4-1
changelog:
  - 1751441: remove strict need for kubeconfig (piotr.kliczewski@gmail.com)
  - 1751624: Allow unicode username only if python-requests allows it
    (wpoteat@redhat.com)
  - 1743589: Content type header null coverage (wpoteat@redhat.com)
  - 1727130: Correct man page for default interval (wpoteat@redhat.com)
  - 1519136: remove references to deprecated configuration (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.1-1
changelog:
  - 1780467: Validate rhevm password when unicode is not allowed
    (wpoteat@redhat.com)
  - 1751441: Add command line path parameter (piotr.kliczewski@gmail.com)
  - 1762780: fix bug, when reporter_id is empty; ENT-1706 (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.3-1
changelog:
  - 1775535: config option to override api version (piotr.kliczewski@gmail.com)
  - Update releasers for new version (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.4-1
changelog:
  - 1806572: virt-who using V3 APIs for communication with RHEVM which is
    deprecated (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 0.28.6-1
changelog:
  - 1806572: RHEVM should only use version 4 (wpoteat@redhat.com)
  - Update to tests to match changes in Subscription Manager (jhnidek@redhat.com)


author: Akira TAGOH <tagoh@redhat.com> - 20121230-2
changelog:
  - Drop -common package and keep consistent state of the directory
    by using the macro. (#893789)
  - Drop old Obsoletes and Provides line.


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-13
changelog:
  - Resolves: #1148872 - The vsftpd doesn't remove failed upload when the
    delete_failed_uploads is enabled and the network cable is unplagged


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-15
changelog:
  - Resolves: #1147550 ssl_request_cert paragraph in the vsftpd.conf man page gets
    rendered incorrectly


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-20
changelog:
  - Resolves: #1147551 - Missing isolate_* options, incorrect default values of
    max_clients, max_per_ip in man vsftpd.conf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.0.2-22
changelog:
  - Resolves: #1432054 - secure ftp stopped working with default TLS settings in the new vsftpd package


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-23
changelog:
  - Redefine VSFTP_COMMAND_FD to 1
  - Resolves: rhbz#1443055
  - Document the relationship of text_userdb_names and chroot_local_user
  - Resolves: rhbz#1508021
  - Document allow_writeable_chroot in the man page
  - Resolves: rhbz#1508022
  - Improve documentation of ascii_* options
  - Resolves: rhbz#1517227
  - Add new filename generation algorithm for STOU command
  - Resolves: rhbz#1479237


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.2-29
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1922809


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-1
changelog:
  - Update to 0.46.1
  - Drop upstreamed patches
  - Drop workaround for old GTK+ bug (#1238315)
  - Rebase downstream patches
  Resolves: #1387056


author: Debarshi Ray <rishi@fedoraproject.org> - 0.46.1-2
changelog:
  - Restore gnome-pty-helper
  - Add git.mk and other dependencies to regenerate the build scripts
  Resolves: #1443504


author: Kir Kolyshkin <kir@openvz.org> - 4.4-1
changelog:
  - New functionality:
  -- vztmpl-dl script to aid in template downloading/updating
  -- nameserver/searchdomain auto-propagation from the host (#2301)
  -- vzctl start: do fsck for ploop, add --skip-fsck (#2615)
  -- add --stop-timeout/STOP_TIMEOUT option (#2621)
  -- vzmigrate: use remote VZ_PRIVATE and VE_ROOT (#2523)
  -- Introduce vz-postinstall script (set sysctl.conf, disable selinux)
  -- vzmigrate: add -f, ability to ignore some checks (#2643)
  -- distscripts: update for newer Arch Linux (#2617)
  -- etc/vz.conf: set default OS template to centos-6-x86
  -- etc/vz.conf: comment out NEIGHBOUR_DEVS by default
  - Fixes:
  -- vzmigrate: fix check for IPs when there are none (#2620)
  -- Deny "unlimited" value for DISKSPACE/DISKINODES
  -- scripts/vps-netns_dev_add: rework config action (#2637)
  -- vzctl convert: fix final renames (#2638)
  -- vzctl convert: rename old private back if failed (#2638)
  -- vzctl convert: fix new directory mode to be 0700 not 0600
  -- scripts/vps-rst: make VE_VETH_DEVS optional (#2659)
  -- fix compilation on arches without support for VZ (RH #971821)
  -- vzlist -j: fix to work on RHEL5 kernel (#2661)
  -- fix exec to really enter into pidns on upstream kernel (#2658)
  -- debian-add_ip.sh: ignore comments when looking for venet0 (#2674)
  -- destroydir(): don't return -1
  -- create.c: fix warnings compiling w/o ploop
  -- build fix for automake < 1.10.2
  - Improvements:
  -- vzmigrate: check ipv6 module on dest (#2555)
  -- Remove check for ploop size (let ploop decide)
  -- vzmigrate: improve invalid cmdline handling
  -- [build] configure: set localstatedir to w/o prefix (#2637#c2)
  - Documentation:
  -- add vztmpl-dl(8)
  -- vzctl(8), vz.conf(5), ctid.conf(5): "inherit" for nameserver/searchdomain
  -- vzctl(8): describe new options --skip-fsck, --stop-timeout
  -- vzmigrate(8): describe new option -f/--nodeps
  -- vzmigrate(8): remove duplicate --live option description
  -- vzmigrate --help: simplify synopsys


author: Kir Kolyshkin <kir@openvz.org> - 4.5-1
changelog:
  - New functionality:
  -- vztmpl-dl: add --upload-all, --ignore-errors
  -- vztmpl-dl: add --list-remote, --list-local
  -- vztmpl-dl: do not check GPG signatures by default
  -- vztmpl-dl: add --gpg-check and --update options
  -- vz-postinstall: enable iptables for bridges (#2641)
  -- vz-postinstall: be verbose about what we do
  -- vzmigrate: support for VE_PRIVATE being a symlink (#2694)
  - Fixes:
  -- ndsend: fix option field in sending packets (#2709)
  -- libvzchown: link to -ldl (#2705)
  -- vps_create(): save LOCAL_UID/GID=0 if !userns for upstream CT
  -- vzctl.spec: run vz-postinstall on a fresh install only
  -- vz-postinstall: do not change rp_filter sysctl
  -- vzmigrate: remove a bashism
  -- vzctl create: fix running postcreate action wrt --ostemplate path/tmpl
  -- vzctl create: use proper version of basename()
  -- vzdaemon_stop(): don't return error if stopped already
  -- read_resolv_conf(): fix potential buffer overflow
  -- vzctl_env_switch_snapshot: fix leak on error path
  -- vzctl_env_convert_ploop(): check chmod return code
  - Improvements:
  -- veth: improve veth random MAC generation (#2695)
  -- vzctl start: always mount /dev/pts for upstream CT
  -- vzmigrate: add / to paths for rsync (#2686)
  -- load_ploop_lib(): load .so.1, try .so too (for ploop-1.9)
  -- scripts: use VPSCONFDIR instead of PKGCONFDIR/conf
  -- vzctl.spec: add /var/lib/vz as a symlink to /vz
  -- vzctl.spec: don't mark symlink as %dir
  -- vzctl.spec: remove a bunch of defines
  -- vzctl.spec: use /var/lib not /var/lib
  -- vzctl.spec: quote rpm macros
  -- vzctl.spec: remove extra slashes
  - Documentation:
  -- vztmpl-dl: improve usage
  -- vztmpl-dl(8): describe new options


author: Kir Kolyshkin <kir@openvz.org> - 4.5.1-1
changelog:
  - Fixes:
  -- Fix loading older (<1.9) ploop library (#2719)
  -- Fix installing rpm for people using /var/lib/vz (#2722)


author: Kir Kolyshkin <kir@openvz.org> - 4.6-1
changelog:
  - New functionality:
  -- Add iolimit and iopslimit (need kernel >= 042stab084.2)
  -- Add optional VM_OVERCOMMIT/--vm_overcommit parameter
  -- In VSwap mode, set some secondary UBCs if unset:
  --- lockedpages=oomguarpages=ram
  --- vmguarpages=ram+swap
  --- privvmpages=(ram+swap)*vm_overcommit (if set)
  -- vzoversell: add
  -- vztmpl-dl: add --list-orphans
  -- vztmpl-dl: add --quiet/--no-quiet
  -- vzubc: don't show unlimited ubcs by default; add -v to show
  -- vzlist: add new fields (vm_overcommit, iolimit, iopslimit)
  - Fixes:
  -- Fix quota on ploop for RHEL5 CT
  -- vzctl console: hack to force redraw on reattach
  -- set_ublimit(): don't set unknown UBs to unlim (#2760)
  -- init.d/vzeventd: set reboot_event (#2764)
  -- arch.conf: add POST_CREATE (#2371)
  -- configure: fix libdir for Debian/Ubuntu case
  -- ct_env_create_real(): fix build for IA64
  -- vzctl create, vzctl exec: do skip fsck
  -- init.d/vz-gentoo: fix setting default for NET_MODULES and PLOOP_MODULES
  -- init.d/vz-redhat: don't reset cpulimits for all CTs
  - Improvements:
  -- Add a way to not modify sysctl.conf on installation (#2375)
  -- vzctl set --reset_ub: only allow for running CT
  -- init.d/vzeventd-redhat: switch to strict bash
  -- vz-postinstall: don't add bridge params to sysctl.conf
  -- vzlist: skip mounted status check if not needed
  -- vzubc: print errors to stderr
  -- vzctl start: don't start CT if /proc mount failed
  -- vzevent-stop: check for suspend/chkpnt
  -- init.d/vz*: unset io limits before stopping CT
  -- [build] setver.sh: add build_id, use getopt
  -- assorted minor code improvements
  - Documentation:
  -- vzctl(8), ctid.conf(5): document vm_overcommit
  -- vzctl(8): fix per-CT action script prefix
  -- vz.conf(5): LOGFILE don't have a default
  -- man: don't hardcode configurable paths
  -- vzlist(8): fix a subsection reference
  -- vzlist(8): fix indentation


author: Kir Kolyshkin <kir@openvz.org> - 4.6.1-1
changelog:
  - Fixes:
  -- vzctl set: require swap to be set for VSwap
  -- fill_vswap_ub(): fix a potential segfault
  -- ndsend: clear reserved2 field (#2804)
  -- vzubc: fix to work in old mawk (#2793)
  -- vzlist: fix bogus CTIDs in list (#2830)
  -- vzctl start: don't fail if VE_ROOT does not exist (#2807)


author: Kir Kolyshkin <kir@openvz.org> - 4.7-1
changelog:
  - New functionality and important changes:
  -- Disable conntrack for VE0 by default (#2755)
  -- vzctl set --diskspace: add --offline-resize (#2281)
  -- vzctl create: use ploop by default
  -- vzctl create, vzctl convert: honor diskinodes for ploop (#2898)
  -- vzctl create: add --diskinodes
  -- vzctl set: new option --netfilter to replace --iptables
  -- vzmigrate: support for copying CT dump file
  -- vzmigrate: introduce/use vzfsync for ploop (to shorten CT freeze time)
  -- bash-completion: CTIDs on ploop for compact
  -- vzctl create: honor MOUNT_OPTS
  -- vzctl console: add set_console dist script (#2865)
  -- vzctl snapshot-switch: add --skip_arpdetect option
  -- vzctl snapshot-switch: add --skip-resume, --skip-config
  -- vzctl set --diskinodes, DISKINODES: allow suffixes (KMG)
  -- vzpid: new option "-p" to show in-container PID(s)
  -- etc/vz.conf: add SKIP_ARPDETECT example
  -- etc/vz.conf: use ploop by default
  -- etc/vz.conf: use vswap config by default
  -- etc/vz.conf: merge IP6TABLES to IPTABLES_MODULES
  - Fixes:
  -- vzctl destroy: fix locking (#2814)
  -- debian-add_ip.sh: setup loopback device at least (#2859)
  -- vzctl start --wait: fix for non-standard Debian 7
  -- postcreate.sh: add Fedora 20+
  -- postcreate.sh: set file caps for suse 13.1+
  -- vzmigrate: fix ploop for diff VE_PRIVATE case (#2875)
  -- vzmigrate: hide ploop getdev output
  -- vzctl status, snapshot-list: don't mess with stdout even when verbose
  -- vzlist: don't spoil output with ploop messages
  -- logger.c: fix wrt ploop logging
  -- etc/network/if-up.d/vzifup-post: fix for Debian Wheezy (#2914)
  -- hooks_ct.c: bind-mount root to itself (fix for kernel v3.11+)
  -- hooks_ct: mount /proc and /sys before umounting old root
  -- bash_completion: replace exit with return
  -- bash_completion.d: add --quiet to vzctl
  -- vzmigrate: call vzctl status with --quiet
  -- vzcptcheck: fix program name in usage
  - Improvements:
  -- add_reach_runlevel_mark(): improve error messages
  -- set(): don't ignore fail from fill_vswap_ub()
  -- vzctl restore: warn in CPT_SET_LOCKFD2 not supported
  -- config.c: add SKIP_ARPDETECT to ignored list
  -- vzmigrate: lock CT locally
  -- vzmigrate --live: check for running CT earlier
  -- destroy_dump(): don't log "Removing" if no dump
  -- etc/conf/*sample: tune DISKINODES for ploop diskspace/diskinodes ratio
  -- etc/conf/ve-unlimited.conf-sample: remove
  -- hooks_ct: remove non-working devpts mount
  -- hooks_ct: mount devtmpfs in CT
  -- ct_chroot(): do not change a set of CT0's mounts
  -- parse_netif_str(): improve NETIF= param parsing
  -- setup_hardlink_dir(): show error if mkdir() failed
  - Documentation:
  -- vzctl(8): document MAX_VEID (#2784)
  -- vzctl --help: fix convert synopsys
  - Build system:
  -- setver.sh: rework buildid
  -- setver.sh: make it work on fresh git source
  -- autogen.sh, setver.sh: fix build from screwed git repo
  -- vzctl.spec: require bridge-utils (as we use brctl)


author: Kir Kolyshkin <kir@openvz.org> - 4.7.2-1
changelog:
  - vzlist: don't complain about missing ploop-lib (#2952)
  - setup_console: don't execute on older kernels (#2961)
  - clean_hardlink_dir(): note unlink/rmdir errors
  - vzctl(8): fix a typo


author: Kir Kolyshkin <kir@openvz.org> - 4.8-1
changelog:
  - New functionality and important changes:
  -- vzctl set: add NUMA --nodemask (sponsored by FastVPS)
  -- vzmigrate: speed up by using se ploop copy with feedback if available
  -- vzmigrate: speed up by reusing ssh connection
  -- init.d/vz: show CT stop status
  -- init.d/vz: implement parallel CT start (#2954, #2084)
  -- init.d/vz, vz.conf: use/expose VE_PARALLEL
  -- vzctl start,restore: add --skip-remount
  -- vzctl snapshot-switch: add --must-restore
  -- vzmigrate: ability to run ploop copy with timestamps
  - Fixes:
  -- vzctl.spec: disable VE0 conntracks only if unused (#2755)
  -- vzmigrate: fix for --snapshot (#2907)
  -- vzmigrate: don't run vzfsync if there is no need (#3055)
  -- vzmigrate: undo_lock if check_cpt_props failed
  -- vzmigrate: don't exit 1 on success
  -- vzlist: fix showing DISABLED (#3029)
  -- vzlist: fix cpulimit rounding (#3063)
  -- redhat-set_hostname.sh: fix for F15+/RHEL7 (#3051)
  -- vzctl compact: use built-in PATH (#2990)
  -- postcreate.sh: fix caps for suexec
  - Improvements:
  -- debian-add_ip.sh: support for Ubuntu 14.04
  -- postcreate.sh: add RHEL7/CentOS7 support
  -- vzctl create --diskinodes: check for max ploop size
  -- vzctl set --ostemplate: require --save (#2909)
  -- vzmigrate: don't specify default cipher
  -- vzmigrate: use getopt for option parsing
  -- vzmigrate: detect "can't lock CT" error
  -- vzmigrate: don't use rsync --delete-excluded
  -- cpumask: allow for up to 4096 CPUs
  -- vz_setcpu(): don't ignore errors from set_cpu*
  -- fixed a few memory leaks and non-closed fds reported by Coverity
  -- compare_osrelease(): fix for 3.x kernels
  -- parse_{chkpnt,restore}_opt: don't print error twice
  -- parse*opt(): add/improve extra args check
  -- vzctl create: improve "no ploop" error message
  - Documentation:
  -- vznnc(8): add
  -- vzctl --help: fix iolimit
  -- vzctl(8): document set --ostemplate (#2909)
  -- vzctl(8): add --nodemask, --must-restore, --skip-remount
  -- vzctl(8): improve --netfilter
  -- vz.conf(5): document VE_PARALLEL
  -- vzmigrate(8), vzmigrate --help: document --ssh-mux
  - Build system:
  -- setver.sh: check for ./configure to run autogen
  -- setver.sh: abort if autogen.sh/configure fails


author: Kir Kolyshkin <kir@openvz.org> - 4.9-1
changelog:
  - New functionality and important changes:
  -- vzmigrate: check CPU caps for suspended CT
  -- suse-{add,del}_ip.sh: support for IP mask
  -- vz.conf: allow list of interfaces in NEIGHBOUR_DEVS (#1289, #3192)
  -- Introduce funtoo-set_hostname (#3097)
  -- vz-postinstall: add a way to disable stock distro kernels from repos
  -- vzctl set --devnodes|--devices: made cumulative, fix
  -- vzctl set --devnodes: remove devices from CT
  -- vzctl start/resume: load kernel modules needed for CT
  -- vzctl create: disallow VE_PRIVATE be a mount point (#3166)
  -- vzevent: try to run a script for all known events
  -- vzctl restore|resume: add --skip-fsck
  - Fixes:
  -- redhat-add_ip.sh: support for Fedora 21 and RHEL/CentOS 7.1 (#3169)
  -- vzctl snapshot-delete: ignore ploop 'no guid found'
  -- suse-add_ip.sh: fix for venet routing in SUSE 13.2
  -- osrelease.conf: add suse 13.2
  -- vzctl chkpnt: workaround for ENOSPC
  -- ct_enter(): enter mnt namespace last (#3038)
  -- vzmigrate: fix for vzfsync if VE_PRIVATE differs (#3170)
  -- init.d/vz-gentoo: fix a typo
  -- vzctl.spec: fix iptables checking for RHEL5 (#2755)
  -- vzmigrate: use DUMPDIR for CT dump (#3054)
  -- vzmigrate: don't hardcode /vz/lock, use LOCKDIR (#2976)
  -- vzmigrate: use C locale (#3049)
  -- vzlist: fix cpuunits rounding (#3120)
  -- snapshot-switch --must-restore: fix restoring config
  -- fs_create: lock private
  -- vps_create: minor fixes to cleanup logic
  -- make_dir_mode(): ignore EEXIST from mkdir()
  -- vzlist -j: output valid JSON for no CTs
  -- init.d/vz-redhat: fix exit codes according to LSB (#3195)
  - Improvements:
  -- vzmigrate: random ports for ploop copy (#3052)
  -- vzctl start: close extra fds later (#3091)
  -- vzctl start: mkdir /proc in CT if needed (#3091)
  -- vzctl create: fix an error message
  -- vzctl.spec: require recent RHEL6 kernel (#3094)
  -- init.d/vz*: load pio_kaio
  -- suse-add_ip.sh: fix a warning
  -- suse-del_ip.sh: remove venet routes
  -- init.d/vz-redhat: fix a bashism (#3148)
  -- vzctl delete: do rm config/dump even if failed to rm VE_PRIVATE
  -- dists/scripts/{funtoo,gentoo}*: remove env var doc
  -- debian-add_ip.sh: silent an error
  -- vzeventd: ignore non-existent event scripts
  - Documentation:
  -- vzeventd(8): document new behavior
  -- vzcptcheck(8): describe caps check w/o CTID
  -- vz.conf(5): describe new NEIGHBOUR_DEV syntax


author: Kir Kolyshkin <kir@openvz.org> - 4.9.1-1
changelog:
  - create_hardlink_dir(): fix wrong owner/perms case (#3222)
  - vzctl.spec: drop the "Conflicts: vzkernel" (#3219)


author: Kir Kolyshkin <kir@openvz.org> - 4.9.2-1
changelog:
  - store_devnodes: fix NULL deref (#3228)
  - vps-create.sh: use stat -f instead of df
  - vzctl.spec: require attr package


author: Richard W.M. Jones <rjones@redhat.com> - 5.12-1
changelog:
  - New upstream version 5.12 (RHBZ#837949).
  - Bring specfile up to modern standards.
  - Remove commented sections from previous commit.
  - Remove both patches (equivalent changes now upstream).


author: Richard W.M. Jones <rjones@redhat.com> - 5.13-2
changelog:
  - Enable /etc/watchdog.d directory for storing test binaries
    (RHBZ#657750, RHBZ#831190).
  - Missing BR systemd-units.
  - Update .gitignore.
  - Drop Group line, not required by modern RPM.


author: Ales Ledvinka <aledvink@redhat.com> - 5.13-9
changelog:
  - SELinux: Add /usr/libexec/watchdog/scripts/ for test-bin and repair-bin to inherit from.
  - systemd: service with network available dependency
  - systemd: correct cgroup for realtime settings
  - Document SELinux and systemd.


author: Josef Ridky <jridky@redhat.com> - 5.13-12
changelog:
  - Resolves: #1092523 - add PIE and RELRO check 
  - Resolves: #1133135 - add ipmi.service dependency to watchdog.service file
  - Resolves: #1259816 - remove deprecated stanza in unit files


author: Peter Lemenkov <lemenkov@gmail.com> 4.60.1-1
changelog:
  - Version 4.60.1 (bugfix release)
  - Added man-pages
  - The only patch was rebased
  - Small cosmetic spec-file cleanups


author: Tomas Popela <tpopela@redhat.com> - 2.14.7-1
changelog:
  - Update to 2.14.7
  - Backport more of a11y fixes from upstream
  - Fix JSC crashes on big endian arches
  - Resolves: rhbz#1442160


author: Tomas Popela <tpopela@redhat.com> - 2.14.7-2
changelog:
  - Fix a CLoop patch that was not correctly backported from upstream, causing
    crashes on big endian machines
  - Resolves: rhbz#1442160


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-4
changelog:
  - Build wayland support
  - Backport fixes proposed by upstream to 2.16 branch
  - Remove accidentally committed workaround for rhbz#1486771
  - Resolves: rhbz#1496800


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-5
changelog:
  - Update the bundled brotli and woff2 to the latest releases due to
    woff2's license incompatibility with WebKitGTK+ project
  - Resolves: rhbz#1499745
  - Drop unused patches


author: Tomas Popela <tpopela@redhat.com> - 2.16.6-6
changelog:
  - Don't strip debug info from bundled icu libraries, otherwise there
    will be conflicts between webkitgtk4-debuginfo and icu-debuginfo packages
  - Resolves: rhbz#1486771


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-1
changelog:
  - Update to 2.20.4
  - Resolves: rhbz#1576544
  - WebKitWebProcess crashes when a11y is active
  - Resolves: rhbz#1591638


author: Tomas Popela <tpopela@redhat.com> - 2.20.4-2
changelog:
  - webkitgtk4: Crash on Google login page when a11y is active
  - Resolves: rhbz#1503624
  - Revert patch causing rendering glitches


author: Tomas Popela <tpopela@redhat.com> - 2.20.5-1
changelog:
  - Update to 2.20.5 - technically it was not necessary as the only difference
    between 2.20.4 and .5 was the revert of one change, that we already reverted
    while building 2.20.4. But it's better to stay with upstream.
  - Update the labels patch with the version that was pushed upstream.
  - Resolves: rhbz#1576544


author: Tomas Popela <tpopela@redhat.com> - 2.14.5-3
changelog:
  - Add explicit requires of webkitgtk4-jsc for -devel and -plugin-process-gtk2
    subpackages (found by rpmdiff).
  - Resolves: rhbz#1383614


author: Tomas Popela <tpopela@redhat.com> - 2.14.6-1
changelog:
  - Update to 2.14.6
  - Resolves: rhbz#1440681
  - Don't crash is no render is available in AX render object
  - Resolves: rhbz#1437672


author: Tomas Popela <tpopela@redhat.com> - 2.14.6-3
changelog:
  - Bundle only needed icu libraries
  - Don't list bundled icu libraries in provides
  - Resolves: rhbz#1383614


author: Tomas Hozza <thozza@redhat.com> 1.14-3
changelog:
  - Added libuuid-devel to BuildRequires to use libuuid functions
    in "src/warc.c" functions (#865421)


author: Tomas Hozza <thozza@redhat.com> - 1.14-5
changelog:
  - Added BuildRequires: perl-podlators for pod2man
  - Patched manpage to silent new Tex errors
  - Resolves: (#914571)


author: Tomas Hozza <thozza@redhat.com> - 1.14-6
changelog:
  - add missing options accept-regex and reject-regex to man page
  - fix errors in texi2pod introduced in Perl-5.18


author: Tomas Hozza <thozza@redhat.com> - 1.14-8
changelog:
  - Fix deadcode and possible use of NULL in vprintf (#913153)
  - Add documentation for --regex-type and --preserve-permissions
  - Fix --preserve-permissions to work as documented (and expected)
  - Fix bug when authenticating using user:password@url syntax (#912358)
  - Document and fix --backups option


author: Tomas Hozza <thozza@redhat.com> - 1.14-12
changelog:
  - Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
  - Run internal test suite during build (#1295846)
  - Fix -nv being documented as synonym for two options (#1147572)


author: Tomas Hozza <thozza@redhat.com> - 1.14-15
changelog:
  - Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
  - Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)


author: Viktor Borzov <vborzov@cloudlinux.com> - 1.14-18.1.tuxcare.els2
changelog:
  - CVE-2026-58470: fix integer overflow in parse_content_range()
  - CVE-2026-58471: fix heap buffer overflow in convert_fname() during filename charset conversion
  - CVE-2026-58472: fix integer/heap buffer overflow in html_quote_string()


author: Peter Hatina <phatina@redhat.com> - 1.10.3-20
changelog:
  - add master secret extension decoding in TLS extension
  - add encrypt-then-mac extension decoding in TLS extension
  - Resolves: #1222901


author: Peter Hatina <phatina@redhat.com> - 1.10.14-4
changelog:
  - Security patches
  - Resolves: CVE-2015-6243
              CVE-2015-6244
              CVE-2015-6245
              CVE-2015-6246
              CVE-2015-6248


author: Peter Hatina <phatina@redhat.com> - 1.10.14-7
changelog:
  - Rebase some tvbuff API from upstream to 1.10.14
  - Fixes crash when tvb_length_remaining() is used
  - Related: CVE-2015-6244


author: Martin Sehnoutka <msehnout@redhat.com> - 1.10.14-12
changelog:
  - Fix wrong snaplen in man pages and help
  - Make the capture buffer bigger to prevent dropping packages


author: Michal Ruprich <mruprich@redhat.com> - 1.10.14-17
changelog:
  - Resolves: #1557212 - CVE-2018-7418 SIGCOMP dissector crash in packet-sigcomp.c
  - Resolves: #1588208 - CVE-2018-11362 Out-of-bounds Read in packet-ldss.c
  - Resolves: #1612146 - CVE-2018-14340 Multiple dissectors could crash
  - Resolves: #1613032 - CVE-2018-14341 DICOM dissector infinite loop
  - Resolves: #1613034 - CVE-2018-14368 Bazaar dissector infinite loop
  - Resolves: #1633330 - CVE-2018-16057 Radiotap dissector crash
  - Resolves: #1660148 - CVE-2018-19622 Infinite loop in the MMSE dissector


author: Michal Ruprich <mruprich@redhat.com> - 1.10.14-21
changelog:
  - Related: #1254543 - removing endian shift in packetlogger because it failed to recognize bluetooth hci packet


author: Petr Pisar <ppisar@redhat.com> - 3.0-11
changelog:
  - Fix error message printing (#585206)
  - Fix Source0 URL and Summary typo
  - Remove libX11-devel and libXft-devel BuildRequires as they are inherited
    from tk-devel. Keep tcl-devel as tcl.h is included directly.


author: Petr Pisar <ppisar@redhat.com> - 3.0-18
changelog:
  - wnb requires a font to start
  - Move Tk browser to sub-package wordnet-browser
  - Move alternative manual pages to wordnet-doc package
  - Do not package INSTALL instructions and correct URL
  - Modernize spec file


author: Karel Zak <kzak@redhat.com> - 3.0-13
changelog:
  - fix #428582 - linux.words contains misspelled word "flourescent"
  - fix #440146 - misspelled word in /usr/share/dict/words (architecure)


author: Karel Zak <kzak@redhat.com> - 3.0-14
changelog:
  - fix #457309 - contains both 'unnecessary' and 'unneccesary'
  - fix #470921 -"Barack" and "Obama" are not in /usr/share/dict/words
  - update spec file (#226542 - Merge Review)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-5
changelog:
  - macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
  - nl80211: Fix race condition in detecting MAC change (rh #1447073)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-7
changelog:
  - avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
    CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
    CVE-2017-13087, CVE-2017-13088)


author: Davide Caratti <dcaratti@redhat.com> - 1:2.6-10
changelog:
  - Fix memory leak when macsec MKA/PSK is used (rh #1500442)
  - Fix authentication failure when the MAC is updated externally (rh #1490885)
  - Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
  - Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
  - Don't own a directory in /run/ (rh #1507919)


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.3.beta
changelog:
  - get rid of binding="same", fixes [rhbz#578050] (New: lang-specific overrides rule doesn't work as expected).


author: Peng Wu <pwu@redhat.com> - 0.2.0-0.4.beta
changelog:
  - Improves Simplified Chinese and Traditional Chinese fonts.
    In order to keep the WenQuanYi Zen Hei as default Simplified Chinese font,
    the fontconfig file of this WenQuanYi Micro Hei font is removed.


author: Roland Grunberg <rgrunber@redhat.com> 0:0.5.2-1
changelog:
  - Update to 0.5.2.
  - Remove xmldb-api due to deprecation.
  - Fix ws-jaxme-ant-scripts.patch to apply cleanly.


author: Gerard Ryan <galileo@fedoraproject.org> - 0:1.6.2-5
changelog:
  - Fix file encoding for wsdl4j-MANIFEST.MF
  - Update Bundle-Version in OSGi manifest
  - Fix installation of jars in specfile
  - Clean up specfile - remove javadoc dir version; remove clean section


author: Ondrej Vasik <ovasik@redhat.com> - 1.61-2
changelog:
  - Merge review cleanup (#226546), comment patches, license
    to LGPLv2+, specify names in files section...


author: Parag Nemade <paragn AT fedoraproject DOT org> - 3.3.12ga11-5
changelog:
  - Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077
  - Cleanup spec as per recently changed packaging guidelines


author: Samantha N. Bueno <sbueno[at]redhat.com> - 3.3.12ga12-1
changelog:
  - updated to 3.3.12ga12
  - fixes CVE-2012-5662 (#889373, #924228)
  - add support for aarch64 to build system (#926737)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.1-15
changelog:
  - Add NOTICE.txt file to subpackages
  - Remove bundled sources of other packages used to build javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.7.1-17
changelog:
  - Remove classpaths from manifests, resolves: rhbz#575635
  - Remove jlex from classpath
  - Fix source URL to archive.apache.org
  - Don't mix spaces and tabs in spec file
  - Fix end-of-line encoding of some documentation files


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Debarshi Ray <rishi@fedoraproject.org> - 1:2.8.8-19
changelog:
  - Use XDG_CONFIG_HOME instead of home for config files
    (http://sourceforge.net/p/xchat/bugs/1506/)
  - Use name and generic name correctly in desktop file
    (http://sourceforge.net/p/xchat/bugs/1397/)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.7-2
changelog:
  - really remove the gcc-warning patch & remove old Makefile from git
  - s/Url/URL/, for both fixes thanks to pshiffer


author: Kalev Lember <kalevlember@gmail.com> - 0.9-1
changelog:
  - Update to 0.9
  - Adjust BuildRequires to build with gtk3
  - Drop lxde patch, merged upstream
  - Validate the desktop file


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.0-0.10.20110714git
changelog:
  - fix gnome-screensaver detection bogosity (#702540,#736159)
  - xdg-open: x-www-browser: command not found (#755553)
  - drop htmlview hackage


author: Kalev Lember <kalev@smartlink.ee> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Dropped CVE-2009-1885 patch.
  - Use dos2unix -k instead of unrecognized option -U
  - Removed the multilib conflict workaround as Xerces_autoconf_config.hpp
    no longer contains the conflicting XERCES_SIZEOF_LONG define.


author: Eric Sandeen <sandeen@redhat.com> 3.1.3-2
changelog:
  - Preserve xattrs on multi-part stream restores (#1034014)
  - Prevent segfault on multi-part stream restores (#1034015)


author: Eric Sandeen <sandeen@redhat.com> 3.1.7-1
changelog:
  - Rebase to build against current RHEL7 xfsprogs headers
  - Fix race condition between lseek() and read()/write() (#1086532)


author: Pavel Reichl <preichl@redhat.com> - 3.1.7-4
changelog:
  - Batch fixing several issues
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump
  -      issue, Related: RHEL-10529
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x,
  -      Related: RHEL-14912


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-8
changelog:
  - revert loff_t to off64_t change to preserve xfs.h behavior (#1366291)
  - accomodate lack of ustat() on some arches (#1373605)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-13
changelog:
  - mkfs.xfs: clarify ftype defaults in manpage (#1488124)
  - mkfs.xfs: allow specification of 0 data stripe width (#1444166)
  - mkfs.xfs: Don't stagger AG for a single disk (#1492552)
  - xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-16
changelog:
  - xfs_db: fix the source command when passed as -c option (#1510279)
  - xfs_metadump: allow much larger extent counts (#1502927)
  - xfs_db: fix crash when field list selector has garbage (#1532271)
  - mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
  - Update project URLs throughout the pkg, code and docs (#1550798)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-20
changelog:
  - xfs_quota: fix errors if project flag is not set on regular files (#1663502)
  - xfs_repair: initialize non-leaf finobt blocks with correct magic (#1670154)


author: Eric Sandeen <sandeen@redhat.com> 4.5.0-21
changelog:
  - mkfs.xfs: make device discard interruptable, print notice (#1769786)
  - xfs_io: remove +/-x flag from chattr, not supported in kernel (#1630112)
  - xfs_metadump: fix symlink handling (#1693138)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.6.alpha2
changelog:
  - xfs_metadump: Require -F if proper SB magic is not found (#1040921)
  - xfs_repair: fix bad block pointer found in large directories (#1034157)
  - libxfs: Don't mark single-map blockmaps as discontiguous (#1033480)
  - libxfs: Clear stale buffer errors on write (1033480)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.7.alpha2
changelog:
  - xfs_metadump: Really add xfs_metadump -F option (#1040921)
  - xfs_check: Remove xfs_check manpage, xfs_check is deprecated (#1029458)


author: Eric Sandeen <sandeen@redhat.com> 3.2.0-0.8.alpha2
changelog:
  - mkfs.xfs fix default log size for small filesystems (#1034003)
  - xfs_copy: partial fixups for CRC filesystems (#1043570)
  - xfs_logprint: Don't error out after split items lose context (#1043591)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-1
changelog:
  - New upstream release (#1119940)
  - xfs_copy: fix data corruption of target (#1105170)
  - mkfs.xfs: handle mkfs of file on 4k block device (#1101236)
  - xfs_copy: don't exit with error code on success (#1100376)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-2
changelog:
  - xfs_quota: fix segfault when reporting on nonexistant path (#1077826)
  - xfs_quota: fix reporting on symlinked paths (#1077841)


author: Eric Sandeen <sandeen@redhat.com> 3.2.1-6
changelog:
  - xfs_repair: fix maximum block offset test (#1173146)
  - xfs_copy: fix assert failure on 4k sector devices (#1162414)
  - xfs_quota: man page updates (#175133, #1175627)


author: Eric Sandeen <sandeen@redhat.com> 3.2.2-1
changelog:
  - Update to upstream v3.2.2, plus fixes from v3.2.3 (#1223991)
  - repair: fix unnecessary secondary scan if only last sb is corrupt (#1201238)
  - repair: check ino alignment value to avoid mod by zero (#1223444)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.0-20020801.1
changelog:
  - Major spec file rewrite (#226559), most visible changes:
  - Various XML cataloguing improvements.
  - Register to SGML catalogs in addition to XML.
  - Install to %{_datadir}/xml per the FHS.
  - Sync with Fedora packaging guidelines.
  - Silence post-install scriptlet.


author: Ismael Olea <ismael@olea.org> 20051222-1
changelog:
  - updating to last version of sample-xsl-xhtml2fo.zip
  - fixing spec for contributing to Fedora and rpmlinting with 0.82


author: Jan Synáček <jsynacek@redhat.com> - 2:2.3.15-13
changelog:
  - modify the xinetd man page to make it more clear on what happens to services on xinetd reload (#1147538)


author: Peter Hutterer <peter.hutterer@redhat.com> - 2.7-3
changelog:
  - Rebuild with fixed xkbcomp, re-create the right directory listing (not
    that anyone actually uses it)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-1
changelog:
  - xkeyboard-config 2.24 (#1564615)
  - Revert the high-keycode patches to avoid conflicts with xkbcomp < 1.4


author: Mat Booth <fedora@matbooth.co.uk> - 1.0-0.5.b3_xalan2.svn313293
changelog:
  - Link to local java API docs properly and fix requires on javadoc package.
  - Build with source and target levels of 1.5 so we don't have to require 1.6.


author: Alexander Kurtakov <akurtako@redhat.com> 1:3.1.3-5
changelog:
  - Remove javax.xml.bind from osgi imports - it's part of the JVM now.
  - Drop the ws-jaxme dependency for the same reason.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.2.19-3
changelog:
  - Fix duplicate documentation (#1001250)
  - Turn on verbose build output via V=1 make
  - Use %?_isa in explicit package deps
  - Fix base package Group tag to "System Environment/Libraries"
  - Remove %defattr


author: Simo Sorce <simo@redhat.com> - 1.2.20-1
changelog:
  - New upstrema version with memleaks, crl checks and other fixes
  - enable make check during build
  - drop ecdsa patch as it has been included upstream


author: Tomas Halman <thalman@redhat.com> - 1.2.20-8
changelog:
  - xmlsec1 fails to validate XML signatures made using ECDSA algorithm in FIPS mode
  - Resolves: RHEL-3337


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.5-1
changelog:
  - Address review commentary https://bugzilla.redhat.com/show_bug.cgi?id=226569
  - Update to 1.5, solving license issue.  This adds a few new files and requires
    a pkgconfig dependency.
  - Add dependency on xml-common to fix unowned directory issue. 
  - Remove some bits (buildroot tag and cleaning) no longer required in Fedora.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.7-3
changelog:
  - luit 1.1.1
  - oclock 1.0.3
  - xclock 1.0.6
  - xbiff 1.0.3
  - xpr 1.0.4
  - xcursorgen 1.0.5
  - xclipboard 1.1.2
  - xfontsel 1.0.4
  - xfd 1.1.1
  - xlogo 1.0.4
  - xvidtune 1.0.3


author: Ben Crocker <bcrocker@redhat.com> - 7.7-7
changelog:
  - Resolves: #1401684
  - (Rebase for RHEL 7.4)
  - Update the following tarballs:
  - x11perf	1.5.4	=>	1.6.0
  - xclipboard	1.1.2	=>	1.1.3
  - xclock	1.0.6	=>	1.0.7
  - xconsole	1.0.5	=>	1.0.6
  - xcursorgen	1.0.5	=>	1.0.6
  - xfd		1.1.1	=>	1.1.2
  - xfontsel	1.0.4	=>	1.0.5
  - xload		1.1.1	=>	1.1.2
  - xmag		1.0.5	=>	1.0.6
  - xwd		1.0.4	=>	1.0.6
  - xwud		1.0.3	=>	1.0.4


author: Hans de Goede <hdegoede@redhat.com> 7.7.1-1
changelog:
  - Update to latest git, this is the equivalent of 7.7.1 + fixes for use
    with xserver-1.19 (rhbz#1325613)
  - Rebuild against xserver-1.19


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
  - Provide xorg-x11-drv-synaptics. The actual content is now provided by
    xorg-x11-drv-synaptics-legacy (#1394836). For details, see
    https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.0-2
changelog:
  - Don't provide xorg-x11-drv-synaptics (#1413811)
  - Don't reassign libinput to wacom touchpads, that's left to the user
  - Don't assign to wacom tablets, tablets behave differently on RHEL7.4


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-4
changelog:
  - nouveau-1.0.11-cleanup-reverse-prime-fb: fix gpu not suspending after
    using an external output in a switchable graphics setup
  - Resolves: rhbz#1349821


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Lyude Paul <lyude@redhat.com> 1.0.13-2
changelog:
  - nouveau-1.0.13-fix-pageflipping-with-atomic.patch:
    Fix broken pageflipping with RHEL 7.4 DRM backport kernel (#1428214)


author: Marc-Andre Lureau <mlureau@redhat.com> 0.1.1-12
changelog:
  - Try to fallback to previous working configuration if
    drmModeSetCrtc() failed.
    Resolves: rhbz#1127552


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.1.1-16
changelog:
  - Fix glitches when restarting X server
    Resolves: rhbz#1102175
  - Fix restarting X server
    Resolves: rhbz#1185807


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1221909
  - Fix memory leak
    Resolves: rhbz#1222038
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1222040


author: Victor Toso <victortoso@redhat.com> - 0.1.5-5
changelog:
  - Fix crash due uninitialized pointer
    Resolves: rhbz#1690453
  - Call LeaveVt on shutdown to avoid racy situations
    Resolves: rhbz#1640918


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-2
changelog:
  - Add Pressure2K option for backwards-compatibility with applications that
    hardcode the previous pressure range (#1457024)


author: Peter Hutterer <peter.hutterer@redhat.com> 0.34.2-3
changelog:
  - Fix hang after unplugging a device (#1496650)
  - Correct device flags for some Cintiqs and Intuos pros (#1496659)


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-10
changelog:
  - Add the epoch to the Provides bdftruncate. bdftruncate had an epoch for
    years, make sure that stays alive


author: Peter Hutterer <peter.hutterer@redhat.com> 1:7.5-14
changelog:
  - mkfontscale 1.1.0
  - mkfontdir 1.0.7
  - bdftopcf 1.0.4
  - Document mkfontscale's -u/-U in the man page (#948841)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.2-11
changelog:
  - Require xorg-x11-font-utils >= 7.2-11 for font-utils 1.1.0
  - Fix bashism in spec file (&>)
  - Remove perl hack for DEFAULT_FONTS_DIR, fixed upstream 
  - Remove perl and autoconf requirement.
  - Create %ghost files {misc|705dpi|...}/fonts.scale.
  - Drop fontdir alias patches
  - Update a few fonts (well, all of them)
      - encodings-1.0.3
      - font-adobe-100dpi-1.0.1
      - font-adobe-75dpi-1.0.1
      - font-adobe-utopia-100dpi-1.0.2
      - font-adobe-utopia-75dpi-1.0.2
      - font-adobe-utopia-type1-1.0.2
      - font-alias-1.0.2
      - font-arabic-misc-1.0.1
      - font-bh-100dpi-1.0.1
      - font-bh-75dpi-1.0.1
      - font-bh-lucidatypewriter-100dpi-1.0.1
      - font-bh-lucidatypewriter-75dpi-1.0.1
      - font-bitstream-100dpi-1.0.1
      - font-bitstream-75dpi-1.0.1
      - font-bitstream-type1-1.0.1
      - font-cronyx-cyrillic-1.0.1
      - font-cursor-misc-1.0.1
      - font-daewoo-misc-1.0.1
      - font-dec-misc-1.0.1
      - font-isas-misc-1.0.1
      - font-jis-misc-1.0.1
      - font-micro-misc-1.0.1
      - font-misc-cyrillic-1.0.1
      - font-misc-ethiopic-1.0.1
      - font-misc-misc-1.1.0
      - font-mutt-misc-1.0.1
      - font-schumacher-misc-1.1.0
      - font-screen-cyrillic-1.0.2
      - font-sony-misc-1.0.1
      - font-sun-misc-1.0.1
      - font-winitzki-cyrillic-1.0.1
      - font-xfree86-type1-1.0.2


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-2.20130401git81aadb8
changelog:
  - Silence rpmlint warning about ldconfig
  - Only install libglamor.so in devel package.
  - Adding COPYING and README as doc


author: Jerome Glisse <jglisse@redhat.com> 0.5.0-3.20130401git81aadb8
changelog:
  - Remove comment rather than investigating Xorg mess as running ldconfig can't be harmfull.
  - Fix devel package dependency.


author: Hans de Goede <hdegoede@redhat.com> - 7.7-10
changelog:
  - fontsproto-2.1.3
  - videoproto-2.3.2
  - xextproto-7.3.0
  - xproto-7.0.26
  - Cherry pick some unreleased fixes from upstream git


author: Peter Hutterer <peter.hutterer@redhat.com> 7.6-24
changelog:
  - bigregsproto 1.1.2
  - compositeproto 0.4.2
  - damageproto 1.2.1
  - fontsproto 2.1.2
  - inputproto 2.2
  - kbproto 1.0.6
  - recordproto 1.14.2
  - scrnsaverproto 1.2.2
  - xcmiscproto 1.2.2
  - xextproto 7.2.1


author: Adam Jackson <ajax@redhat.com> - 1.20.4-11
changelog:
  - Fix a crash when moving an animated cursor between screens
  - Be case-insentive when matching extension names to enable or disable


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.4-12
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
    CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
  - Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes


